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", 0x1000}], 0x7, &(0x7f0000003300)=ANY=[@ANYBLOB="300021010000001d0000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x10}}], 0x1, 0x20000090) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@ipv6_delrule={0x9c, 0x21, 0x20, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x10, 0x8, 0x5, 0x0, 0x0, 0x88476e34c2efbeba, 0x13}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r10}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x9c}}, 0x8004) connect$packet(r3, &(0x7f0000000440)={0x11, 0x15, r6, 0x1, 0x99, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x4}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) [ 3303.943429][T20888] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 [ 3303.949565][T20888] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3303.957681][T20888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3303.965709][T20888] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3303.973738][T20888] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 0000000000325f7a [ 3303.981776][T20888] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3303.989841][T20888] [ 3304.041481][T20888] memory: usage 307184kB, limit 307200kB, failcnt 78423 [ 3304.049039][T20888] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3304.056045][T20888] Memory cgroup stats for /syz0: [ 3304.056312][T20888] anon 131072 [ 3304.056312][T20888] file 356352 [ 3304.056312][T20888] kernel 314068992 [ 3304.056312][T20888] kernel_stack 65536 [ 3304.056312][T20888] pagetables 77824 [ 3304.056312][T20888] sec_pagetables 0 [ 3304.056312][T20888] percpu 5432256 [ 3304.056312][T20888] sock 0 [ 3304.056312][T20888] vmalloc 0 [ 3304.056312][T20888] shmem 344064 [ 3304.056312][T20888] zswap 0 [ 3304.056312][T20888] zswapped 0 [ 3304.056312][T20888] file_mapped 327680 [ 3304.056312][T20888] file_dirty 12288 [ 3304.056312][T20888] file_writeback 0 [ 3304.056312][T20888] swapcached 0 [ 3304.056312][T20888] anon_thp 0 [ 3304.056312][T20888] file_thp 0 [ 3304.056312][T20888] shmem_thp 0 [ 3304.056312][T20888] inactive_anon 81920 [ 3304.056312][T20888] active_anon 393216 [ 3304.056312][T20888] inactive_file 12288 [ 3304.056312][T20888] active_file 0 [ 3304.056312][T20888] unevictable 0 [ 3304.056312][T20888] slab_reclaimable 18728 [ 3304.056312][T20888] slab_unreclaimable 308446576 [ 3304.056312][T20888] slab 308465304 [ 3304.056312][T20888] workingset_refault_anon 0 [ 3304.056312][T20888] workingset_refault_file 4 [ 3304.056312][T20888] workingset_activate_anon 0 [ 3304.056312][T20888] workingset_activate_file 0 [ 3304.056312][T20888] workingset_restore_anon 0 [ 3304.056312][T20888] workingset_restore_file 1 [ 3304.056312][T20888] workingset_nodereclaim 0 [ 3304.056312][T20888] pgscan 60093 [ 3304.056312][T20888] pgsteal 552 [ 3304.056312][T20888] pgscan_kswapd 0 [ 3304.056312][T20888] pgscan_direct 60093 [ 3304.056312][T20888] pgscan_khugepaged 0 [ 3304.056312][T20888] pgsteal_kswapd 0 [ 3304.056312][T20888] pgsteal_direct 552 [ 3304.056312][T20888] pgsteal_khugepaged 0 [ 3304.056312][T20888] pgfault 435490 [ 3304.056312][T20888] pgmajfault 2 [ 3304.056312][T20888] pgrefill 193426 [ 3304.056312][T20888] pgactivate 59444 [ 3304.056312][T20888] pgdeactivate 0 [ 3304.056312][T20888] pglazyfree 0 [ 3304.056312][T20888] pglazyfreed 0 [ 3304.056312][T20888] zswpin 0 [ 3304.056312][T20888] zswpout 0 08:18:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf1580300) [ 3304.245110][T20888] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20888,uid=0 [ 3304.263609][T20888] Memory cgroup out of memory: Killed process 20888 (syz-executor.0) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3304.284642][T20896] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3304.297567][T20896] CPU: 1 PID: 20896 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3304.308157][T20896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3304.318267][T20896] Call Trace: [ 3304.321579][T20896] [ 3304.324555][T20896] dump_stack_lvl+0x136/0x150 [ 3304.329302][T20896] dump_header+0x10a/0xd70 [ 3304.333797][T20896] oom_kill_process+0x25d/0x600 [ 3304.338726][T20896] out_of_memory+0x35c/0x1660 [ 3304.343490][T20896] ? oom_killer_disable+0x2b0/0x2b0 [ 3304.348761][T20896] ? rcu_read_unlock+0x9/0x60 [ 3304.353508][T20896] ? find_held_lock+0x2d/0x110 [ 3304.358357][T20896] mem_cgroup_out_of_memory+0x206/0x270 [ 3304.363984][T20896] ? mem_cgroup_margin+0x130/0x130 [ 3304.369172][T20896] ? lock_downgrade+0x690/0x690 [ 3304.374116][T20896] try_charge_memcg+0xf9b/0x13b0 [ 3304.379162][T20896] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3304.385207][T20896] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3304.391006][T20896] ? lock_downgrade+0x690/0x690 [ 3304.395934][T20896] ? lock_downgrade+0x690/0x690 [ 3304.400867][T20896] obj_cgroup_charge+0x2af/0x5e0 [ 3304.405868][T20896] ? sock_alloc_inode+0x27/0x1d0 [ 3304.410878][T20896] kmem_cache_alloc_lru+0x142/0x600 [ 3304.416172][T20896] sock_alloc_inode+0x27/0x1d0 [ 3304.421031][T20896] ? sock_free_inode+0x30/0x30 [ 3304.426120][T20896] alloc_inode+0x61/0x230 [ 3304.430519][T20896] new_inode_pseudo+0x17/0x80 [ 3304.435270][T20896] sock_alloc+0x40/0x270 [ 3304.439586][T20896] __sock_create+0xbd/0x850 [ 3304.444165][T20896] ? xfd_validate_state+0x5d/0x180 [ 3304.449351][T20896] __sys_socket+0x133/0x250 [ 3304.453924][T20896] ? __sys_socket_file+0x1d0/0x1d0 [ 3304.459114][T20896] __x64_sys_socket+0x73/0xb0 [ 3304.463859][T20896] do_syscall_64+0x39/0xb0 [ 3304.468352][T20896] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3304.474325][T20896] RIP: 0033:0x7f0e44a8c169 [ 3304.478768][T20896] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3304.498493][T20896] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3304.506968][T20896] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3304.514997][T20896] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3304.523035][T20896] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3304.531074][T20896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3304.539104][T20896] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 08:18:31 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3a510300) [ 3304.547177][T20896] [ 3304.552736][T20896] memory: usage 307200kB, limit 307200kB, failcnt 72324 [ 3304.560167][T20896] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3304.568593][T20896] Memory cgroup stats for /syz5: [ 3304.568965][T20896] anon 94208 [ 3304.568965][T20896] file 352256 [ 3304.568965][T20896] kernel 314109952 [ 3304.568965][T20896] kernel_stack 65536 [ 3304.568965][T20896] pagetables 73728 [ 3304.568965][T20896] sec_pagetables 0 [ 3304.568965][T20896] percpu 5432688 [ 3304.568965][T20896] sock 0 [ 3304.568965][T20896] vmalloc 20480 [ 3304.568965][T20896] shmem 344064 [ 3304.568965][T20896] zswap 0 [ 3304.568965][T20896] zswapped 0 [ 3304.568965][T20896] file_mapped 327680 [ 3304.568965][T20896] file_dirty 8192 [ 3304.568965][T20896] file_writeback 0 [ 3304.568965][T20896] swapcached 0 [ 3304.568965][T20896] anon_thp 0 [ 3304.568965][T20896] file_thp 0 [ 3304.568965][T20896] shmem_thp 0 [ 3304.568965][T20896] inactive_anon 45056 [ 3304.568965][T20896] active_anon 393216 [ 3304.568965][T20896] inactive_file 8192 [ 3304.568965][T20896] active_file 0 [ 3304.568965][T20896] unevictable 0 [ 3304.568965][T20896] slab_reclaimable 12472 [ 3304.568965][T20896] slab_unreclaimable 308478384 [ 3304.568965][T20896] slab 308490856 [ 3304.568965][T20896] workingset_refault_anon 0 [ 3304.568965][T20896] workingset_refault_file 1 [ 3304.568965][T20896] workingset_activate_anon 0 [ 3304.568965][T20896] workingset_activate_file 0 [ 3304.568965][T20896] workingset_restore_anon 0 [ 3304.568965][T20896] workingset_restore_file 0 [ 3304.568965][T20896] workingset_nodereclaim 0 [ 3304.568965][T20896] pgscan 42078 [ 3304.568965][T20896] pgsteal 445 [ 3304.568965][T20896] pgscan_kswapd 0 [ 3304.568965][T20896] pgscan_direct 42078 [ 3304.568965][T20896] pgscan_khugepaged 0 [ 3304.568965][T20896] pgsteal_kswapd 0 [ 3304.568965][T20896] pgsteal_direct 445 [ 3304.568965][T20896] pgsteal_khugepaged 0 [ 3304.568965][T20896] pgfault 411303 [ 3304.568965][T20896] pgmajfault 0 [ 3304.568965][T20896] pgrefill 137998 [ 3304.568965][T20896] pgactivate 41618 [ 3304.568965][T20896] pgdeactivate 0 [ 3304.568965][T20896] pglazyfree 0 [ 3304.568965][T20896] pglazyfreed 0 [ 3304.568965][T20896] zswpin 0 [ 3304.568965][T20896] zswpout 0 [ 3304.760533][T20896] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20892,uid=0 [ 3304.776396][T20896] Memory cgroup out of memory: Killed process 20892 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8880kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:18:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcc4b0300) [ 3304.806057][T20897] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3304.818922][T20897] CPU: 1 PID: 20897 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3304.829420][T20897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3304.839528][T20897] Call Trace: [ 3304.842839][T20897] [ 3304.845811][T20897] dump_stack_lvl+0x136/0x150 [ 3304.850556][T20897] dump_header+0x10a/0xd70 [ 3304.855046][T20897] oom_kill_process+0x25d/0x600 [ 3304.859963][T20897] out_of_memory+0x35c/0x1660 [ 3304.864715][T20897] ? oom_killer_disable+0x2b0/0x2b0 [ 3304.870022][T20897] ? rcu_read_unlock+0x9/0x60 [ 3304.874775][T20897] ? find_held_lock+0x2d/0x110 [ 3304.879624][T20897] mem_cgroup_out_of_memory+0x206/0x270 [ 3304.885245][T20897] ? mem_cgroup_margin+0x130/0x130 [ 3304.890422][T20897] ? lock_downgrade+0x690/0x690 [ 3304.895406][T20897] try_charge_memcg+0xf9b/0x13b0 [ 3304.900403][T20897] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3304.906546][T20897] ? rcu_read_unlock+0x9/0x60 [ 3304.911278][T20897] ? lock_downgrade+0x690/0x690 [ 3304.916178][T20897] charge_memcg+0x90/0x3b0 [ 3304.920626][T20897] __mem_cgroup_charge+0x2b/0x90 [ 3304.925599][T20897] do_wp_page+0x8eb/0x3520 [ 3304.930075][T20897] ? lock_release+0x670/0x670 [ 3304.934786][T20897] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3304.940207][T20897] ? do_raw_spin_lock+0x124/0x2b0 [ 3304.945266][T20897] ? spin_bug+0x1c0/0x1c0 [ 3304.949650][T20897] ? lock_downgrade+0x690/0x690 [ 3304.954651][T20897] __handle_mm_fault+0x19a1/0x3e60 [ 3304.959821][T20897] ? vm_iomap_memory+0x190/0x190 [ 3304.964821][T20897] handle_mm_fault+0x2ba/0x9c0 [ 3304.969647][T20897] do_user_addr_fault+0x475/0x1230 [ 3304.974803][T20897] ? rcu_is_watching+0x12/0xb0 [ 3304.979611][T20897] exc_page_fault+0x98/0x170 [ 3304.984239][T20897] asm_exc_page_fault+0x26/0x30 [ 3304.989132][T20897] RIP: 0033:0x7f79ea839610 [ 3304.993574][T20897] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3305.013213][T20897] RSP: 002b:00007ffd939e5ce0 EFLAGS: 00010246 [ 3305.019310][T20897] RAX: 00000000c45a0a22 RBX: 00007f79ea9ac018 RCX: 0000001b2d020000 [ 3305.027405][T20897] RDX: 0000000000000000 RSI: 0000001b2d020018 RDI: 000000000a21e670 [ 3305.035492][T20897] RBP: 00000000c45a0a22 R08: 0000000000000a22 R09: 00000000c45a0a26 [ 3305.043491][T20897] R10: 00007ffd939e5ea0 R11: 0000000000000246 R12: 00007f79ea9a0000 [ 3305.051485][T20897] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff83cafedf [ 3305.059480][T20897] ? security_socket_create+0x3f/0xc0 [ 3305.064917][T20897] [ 3305.082353][T20897] memory: usage 307200kB, limit 307200kB, failcnt 75234 [ 3305.090183][T20897] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3305.097367][T20897] Memory cgroup stats for /syz4: [ 3305.097642][T20897] anon 118784 [ 3305.097642][T20897] file 331776 [ 3305.097642][T20897] kernel 314101760 [ 3305.097642][T20897] kernel_stack 65536 [ 3305.097642][T20897] pagetables 69632 [ 3305.097642][T20897] sec_pagetables 0 [ 3305.097642][T20897] percpu 5432256 [ 3305.097642][T20897] sock 0 [ 3305.097642][T20897] vmalloc 0 [ 3305.097642][T20897] shmem 311296 [ 3305.097642][T20897] zswap 0 [ 3305.097642][T20897] zswapped 0 [ 3305.097642][T20897] file_mapped 311296 [ 3305.097642][T20897] file_dirty 8192 [ 3305.097642][T20897] file_writeback 0 [ 3305.097642][T20897] swapcached 0 [ 3305.097642][T20897] anon_thp 0 [ 3305.097642][T20897] file_thp 0 [ 3305.097642][T20897] shmem_thp 0 [ 3305.097642][T20897] inactive_anon 32768 [ 3305.097642][T20897] active_anon 397312 [ 3305.097642][T20897] inactive_file 0 [ 3305.097642][T20897] active_file 20480 [ 3305.097642][T20897] unevictable 0 [ 3305.097642][T20897] slab_reclaimable 17640 [ 3305.097642][T20897] slab_unreclaimable 308486840 [ 3305.097642][T20897] slab 308504480 [ 3305.097642][T20897] workingset_refault_anon 0 [ 3305.097642][T20897] workingset_refault_file 0 [ 3305.097642][T20897] workingset_activate_anon 0 [ 3305.097642][T20897] workingset_activate_file 0 [ 3305.097642][T20897] workingset_restore_anon 0 [ 3305.097642][T20897] workingset_restore_file 0 [ 3305.097642][T20897] workingset_nodereclaim 0 [ 3305.097642][T20897] pgscan 49547 [ 3305.097642][T20897] pgsteal 480 [ 3305.097642][T20897] pgscan_kswapd 0 [ 3305.097642][T20897] pgscan_direct 49547 [ 3305.097642][T20897] pgscan_khugepaged 0 [ 3305.097642][T20897] pgsteal_kswapd 0 [ 3305.097642][T20897] pgsteal_direct 480 [ 3305.097642][T20897] pgsteal_khugepaged 0 [ 3305.097642][T20897] pgfault 403762 [ 3305.097642][T20897] pgmajfault 1 [ 3305.097642][T20897] pgrefill 133608 [ 3305.097642][T20897] pgactivate 49006 [ 3305.097642][T20897] pgdeactivate 0 [ 3305.097642][T20897] pglazyfree 0 [ 3305.097642][T20897] pglazyfreed 0 [ 3305.097642][T20897] zswpin 0 [ 3305.097642][T20897] zswpout 0 [ 3305.287101][T20897] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20897,uid=0 08:18:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc403000000000000) [ 3305.303534][T20897] Memory cgroup out of memory: Killed process 20897 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8784kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3305.400542][T20900] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3305.424745][T20900] CPU: 1 PID: 20900 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3305.435283][T20900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3305.445390][T20900] Call Trace: [ 3305.448709][T20900] [ 3305.451690][T20900] dump_stack_lvl+0x136/0x150 [ 3305.456427][T20900] dump_header+0x10a/0xd70 [ 3305.460915][T20900] oom_kill_process+0x25d/0x600 [ 3305.465884][T20900] out_of_memory+0x35c/0x1660 [ 3305.470635][T20900] ? find_held_lock+0x2d/0x110 [ 3305.475478][T20900] ? oom_killer_disable+0x2b0/0x2b0 [ 3305.480736][T20900] ? rcu_read_unlock+0x9/0x60 [ 3305.485484][T20900] ? find_held_lock+0x2d/0x110 [ 3305.490335][T20900] mem_cgroup_out_of_memory+0x206/0x270 [ 3305.495963][T20900] ? mem_cgroup_margin+0x130/0x130 [ 3305.501155][T20900] ? lock_downgrade+0x690/0x690 [ 3305.506093][T20900] try_charge_memcg+0xf9b/0x13b0 [ 3305.511105][T20900] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3305.517147][T20900] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3305.522943][T20900] ? lock_downgrade+0x690/0x690 [ 3305.527867][T20900] ? lock_downgrade+0x690/0x690 [ 3305.532804][T20900] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3305.538426][T20900] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3305.544670][T20900] copy_process+0x4e3/0x7590 [ 3305.549341][T20900] ? __lock_acquire+0xbc5/0x5d40 [ 3305.554341][T20900] ? __cleanup_sighand+0xb0/0xb0 [ 3305.559371][T20900] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3305.565419][T20900] ? psi_memstall_leave+0x174/0x250 [ 3305.570692][T20900] ? lock_downgrade+0x690/0x690 [ 3305.575610][T20900] kernel_clone+0xeb/0x890 [ 3305.580089][T20900] ? create_io_thread+0xf0/0xf0 [ 3305.585012][T20900] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3305.591332][T20900] ? lock_downgrade+0x690/0x690 [ 3305.596355][T20900] __do_sys_clone+0xba/0x100 [ 3305.601013][T20900] ? kernel_clone+0x890/0x890 [ 3305.605774][T20900] ? syscall_enter_from_user_mode+0x26/0x80 [ 3305.611749][T20900] do_syscall_64+0x39/0xb0 [ 3305.616233][T20900] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3305.622190][T20900] RIP: 0033:0x7f461ea8d591 [ 3305.626734][T20900] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3305.646388][T20900] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3305.654912][T20900] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3305.662923][T20900] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3305.670921][T20900] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3305.678919][T20900] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3305.686909][T20900] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3305.695005][T20900] [ 3305.700252][T20900] memory: usage 307200kB, limit 307200kB, failcnt 80043 [ 3305.716927][T20900] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3305.723873][T20900] Memory cgroup stats for /syz3: [ 3305.724151][T20900] anon 86016 [ 3305.724151][T20900] file 360448 [ 3305.724151][T20900] kernel 314109952 [ 3305.724151][T20900] kernel_stack 32768 [ 3305.724151][T20900] pagetables 69632 [ 3305.724151][T20900] sec_pagetables 0 [ 3305.724151][T20900] percpu 5432256 [ 3305.724151][T20900] sock 0 [ 3305.724151][T20900] vmalloc 8192 [ 3305.724151][T20900] shmem 339968 [ 3305.724151][T20900] zswap 0 [ 3305.724151][T20900] zswapped 0 [ 3305.724151][T20900] file_mapped 327680 [ 3305.724151][T20900] file_dirty 16384 [ 3305.724151][T20900] file_writeback 0 [ 3305.724151][T20900] swapcached 0 [ 3305.724151][T20900] anon_thp 0 [ 3305.724151][T20900] file_thp 0 [ 3305.724151][T20900] shmem_thp 0 [ 3305.724151][T20900] inactive_anon 393216 [ 3305.724151][T20900] active_anon 32768 [ 3305.724151][T20900] inactive_file 0 [ 3305.724151][T20900] active_file 20480 [ 3305.724151][T20900] unevictable 0 [ 3305.724151][T20900] slab_reclaimable 36944 [ 3305.724151][T20900] slab_unreclaimable 308482544 [ 3305.724151][T20900] slab 308519488 [ 3305.724151][T20900] workingset_refault_anon 0 [ 3305.724151][T20900] workingset_refault_file 2 [ 3305.724151][T20900] workingset_activate_anon 0 [ 3305.724151][T20900] workingset_activate_file 0 [ 3305.724151][T20900] workingset_restore_anon 0 [ 3305.724151][T20900] workingset_restore_file 0 [ 3305.724151][T20900] workingset_nodereclaim 0 [ 3305.724151][T20900] pgscan 54560 [ 3305.724151][T20900] pgsteal 449 [ 3305.724151][T20900] pgscan_kswapd 0 [ 3305.724151][T20900] pgscan_direct 54560 [ 3305.724151][T20900] pgscan_khugepaged 0 [ 3305.724151][T20900] pgsteal_kswapd 0 [ 3305.724151][T20900] pgsteal_direct 449 [ 3305.724151][T20900] pgsteal_khugepaged 0 [ 3305.724151][T20900] pgfault 415394 [ 3305.724151][T20900] pgmajfault 1 [ 3305.724151][T20900] pgrefill 198932 [ 3305.724151][T20900] pgactivate 54102 [ 3305.724151][T20900] pgdeactivate 0 [ 3305.724151][T20900] pglazyfree 0 [ 3305.724151][T20900] pglazyfreed 0 [ 3305.724151][T20900] zswpin 0 [ 3305.724151][T20900] zswpout 0 [ 3305.915528][T20900] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20900,uid=0 [ 3305.933794][T20900] Memory cgroup out of memory: Killed process 20900 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3305.957075][T20903] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3305.976810][T20903] CPU: 0 PID: 20903 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3305.987328][T20903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3305.997448][T20903] Call Trace: [ 3306.000769][T20903] [ 3306.003744][T20903] dump_stack_lvl+0x136/0x150 [ 3306.008492][T20903] dump_header+0x10a/0xd70 [ 3306.012984][T20903] oom_kill_process+0x25d/0x600 [ 3306.017900][T20903] out_of_memory+0x35c/0x1660 [ 3306.022617][T20903] ? oom_killer_disable+0x2b0/0x2b0 [ 3306.027863][T20903] ? rcu_read_unlock+0x9/0x60 [ 3306.032592][T20903] ? find_held_lock+0x2d/0x110 [ 3306.037418][T20903] mem_cgroup_out_of_memory+0x206/0x270 [ 3306.043156][T20903] ? mem_cgroup_margin+0x130/0x130 [ 3306.048329][T20903] ? lock_downgrade+0x690/0x690 [ 3306.053229][T20903] try_charge_memcg+0xf9b/0x13b0 [ 3306.058206][T20903] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3306.064231][T20903] ? rcu_read_unlock+0x9/0x60 [ 3306.068975][T20903] ? lock_downgrade+0x690/0x690 [ 3306.073871][T20903] charge_memcg+0x90/0x3b0 [ 3306.078319][T20903] __mem_cgroup_charge+0x2b/0x90 [ 3306.083289][T20903] do_wp_page+0x8eb/0x3520 [ 3306.087772][T20903] ? lock_release+0x670/0x670 [ 3306.092516][T20903] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3306.097959][T20903] ? do_raw_spin_lock+0x124/0x2b0 [ 3306.103051][T20903] ? spin_bug+0x1c0/0x1c0 [ 3306.107409][T20903] ? lock_downgrade+0x690/0x690 [ 3306.112320][T20903] __handle_mm_fault+0x19a1/0x3e60 [ 3306.117482][T20903] ? vm_iomap_memory+0x190/0x190 [ 3306.122471][T20903] handle_mm_fault+0x2ba/0x9c0 [ 3306.127268][T20903] do_user_addr_fault+0x475/0x1230 [ 3306.132416][T20903] ? rcu_is_watching+0x12/0xb0 [ 3306.137235][T20903] exc_page_fault+0x98/0x170 [ 3306.141894][T20903] asm_exc_page_fault+0x26/0x30 [ 3306.146816][T20903] RIP: 0033:0x7f9ac6239610 [ 3306.151274][T20903] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3306.170996][T20903] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3306.177089][T20903] RAX: 00000000c45a0a22 RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3306.185080][T20903] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000a21e670 [ 3306.193083][T20903] RBP: 00000000c45a0a22 R08: 0000000000000a22 R09: 00000000c45a0a26 [ 3306.201097][T20903] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3306.209096][T20903] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff83cafedf [ 3306.217111][T20903] ? security_socket_create+0x3f/0xc0 [ 3306.222539][T20903] 08:18:32 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6810, 0x460}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x28}}, 0x40000) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x7, 0x5}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@ipv4_getaddr={0x28, 0x16, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x1f, 0x119}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x8080) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48800000240051333302f0ae8e454bace086ad7839f4cfe8ce", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000f0018000100"/48], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000680)="d0b57cf9e236fb837ea941332cf2c6467d2d6fc2c0ba3b44902602cc9e1ffdfddec3d72dfed8836d4f56ec54e28991b464de8d519f60d74ff32d113f837cd60b5b8fd0774238fea14776f2a70fbfff10c68446c24cde2127f614545d492ec82e0739f734863f7c319e744c913a36c547b4e59e15ab70afc65119d83a04db58fabf47425e6d542c8b56a8a13d6e527ebc51fc51a894a7f282434481b76f3270e05f7f3f59031abac954da6e92c8b06ea34892598df664be19066118408d7ec9cf386f1304ceda504465d6ba2f00b4cfc371921c1a463b90a42292f4", &(0x7f0000000900)=@udp}, 0x20) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0x1) shutdown(r7, 0x1) (async) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = getpid() (async) r10 = getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x81}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7, 0x4e20, 0x4, 0xa, 0xa0, 0xa0, 0x87, 0x0, r10}, {0xebc, 0x1567d527, 0x1, 0x0, 0x3, 0x8, 0x40, 0x3}, {0x4f5, 0x40000000000000, 0xa8, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x3506, 0x1, 0x0, 0x54, 0x0, 0x80000000}}, 0xe8) (async) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={r9, r10}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003280)=[{&(0x7f00000000c0)="8e27f8b327b08b25e048ce11f0a6d89a2919a9d02158c33a537d0a61be5e2a756ca64b2ca64f59f91fd032b8cf7ce7747e8974", 0x33}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000140)="838f7f7e68a2eef8e46034426d8c8c41c25bfc1ce49df0c1", 0x18}, {&(0x7f0000001200)="a70d02a97565c55cdea6e1aa1ac03c31916b6d7c827c68fcfa52407489af2e0feab2f911bf8cedf71634d178cd5e90b637f4350dd55a55a16b63e99b2726497a39cc080dff30257997e9e3bb10908f4c0e5cf900a2a322c0a3dc1e3e179d1dbf2a0c3779be20f76b22faba6cf7fbaaff925cd7ce463cdc13a94ee1c1280620aa8a19088f93f32d5f3c3edff9e712f7c0cd3cfc5a57e42686468c75cd425c2d9acdbf57b26e4bfc91480d3e722e8d9dee996b4c654d2eadf7007929cdfda1eda40c0eac3c73a2fb4c52b9b78bd9ed682a522ecd270c657f3905ac0bb4f2dc21fcbdec12af5ab0a2307f10342b8ec064bf54010aea57dfea05b1a193a166ae42fd7bdfa749fc0fcaad268a7133d8227afc86e07c0b4c8c4e303f34dad4093e60ee50f7a44e893fd26885076f1a7210df6de9a9715808230db6cf638fd01e92acf1ad8900be7d7d862c69b8ddc7f01eb2257c9eb96fdc31d74c2ed847627fc3da9b363d8faebad6ca62492e8c12e9c1a65bcfab3736be074e9eb22be38ae3187387b4cccb23d040b6b382ab3afc68e9749d8a9ae7c794a39a772e57577372e5c55b3c4c10637705e56c4d57e0a0e603812cc812f90da46242028f2a7f91c391ceac5135d47247990fb897109cb669f8c46b996022fab811e91b572d001567c9b1fea2b40aeb6141d439e597563d66f1d0845b21d5a77e7d577d815189870c67858ee82063759de8de59d36b990e0b95c513bbf6ad263f8be63eb8c40ea81a042de6e1c6fc5ca67a18d8eafc1c8b5a4cc33c0adbe3b8c3525a947f8170a263445499a1ec3d8adc97a38b1f725187b47ec6ee5e39164180d87aa31007a89f9e54eb5a327e472ed4a28db5f210836223bcf56b07a4ba112a22d2c5b48aa216c118d0910ec8bcf7c3abff65d283a3b0e873ceab7cead9a07e26e222176b466222b264ad6a93a7e6f8b91d3260111368040231d3b8364cb20699c589486b96f73e03c3ab38ff8cb82d9cce65fc4996768c6e91600829041aae24adb80678d1c5bc89a34e84a2efb5eee671255a3626e7285e8a7e3b9f0e61cf88c71ac65a659999938b9d43b3d444f27b0ea08bbfc3b815a9561ffa3486b0a34be0dfd2fc3897aff839d222683321c93bd738f7704fe795822f8014aeed08c126b41d84f5b00f677b4981291c8b3d686582daa5b4adff63c803a99aacd69469c79c552db313b735f67c42ce058312514a85a02d823a81c21850713aaf8a94bb22d2cceacce48da183aa4562abf24451fd8b58cd24a41527a085b93b7f21c41bd162cec86253c24395647c347ca8561e04524bdaf5333681d5d7e04b23028418cf054b0ba874922cde9e671147e40789d1fc0eb7d57e80b8e55f935670364ac07b3a8090e0d47a8e00f6462cd44cd55a65d82f64417539ae31262ee96b698359895d9f7db2a999ccedbac7cb4c028566b5f41572a6fb4b9c1bbf53b03dc078a6357d9eca0a518749e356a754cea7ce4ab30377ef6fb3a28f7364d3324462eb33b2562f66f886b7b14781d1341f9a4e4a965f99b5db3317003700a5a2ffc409babfe3042b2f3cba66e856ecc9fd22747c482070c0c6c11f4dfb0a38387b2cc29e38883e643c2a5586effe3237370b310fd4fabcc907573fd964c0b4214563b596ac920bda3ec707597b3927a5780afd5cbe5d81411ae908410a83c2b54abe282e98a763528394d28b6c2f0a5f9352d626a585f85c8e0b984e2249a50ccb590f295c97b1985aeb3f9889766d5b1367faf6bfe00d033491bded5dab72300675cbfb3d87ef9baaa398eb13df90c19052623c76bbbeb1901aad9bfec172fd18fe091f2c3f3d80089e394e60c7f8533cf5ee14749a7ae86180ddf5db445ed059e856f2f76c09f0c134702b33c2e87521fa51d1a4d8b1658ce0ae163bc6bc71428069d612b026f41a74ccaa8cd543587643b685c95f6ec3efe85164bc0750214faec5bf5c27f36cf95e711787cd2ca06c9df5fe767180afb423c0d8b56f13e02540cd57c4f17fb27917bfbb23e5ead0ac83cb1b188738bf873d2acf5d24d4d37c0c74c4f8138a3455d21efebd4c51c8385d0f73b438d5e58d0456ebdcde6ab9e9280df9f9726fc5411bac1cf867ac50fe0fab0cb4b564d63d6f12e01e42b2ed7cd782cb588ea96f57f6d45252d9dfefd95d93cf4e8962e4cfe1246dc3f42ab4c3156a3142c1c6672622478c3966d2bae11f88db1c3bf712ff88571faef31e688a86b56a4ff52b5abddb0fdeeb2171331d2e43bcca26d04a65fae3a15161ab54dfa553da2f4355630f26ac9cd102910873c8e71fcb2723cdf06511e86ae0858019efe9ec03682a7815773135ba645c1ec81df879c3d31762209bede57c5aff710357d0a855a5d778356cd4075987a4327a738b63b75da75be59017f7bbc888e995b63e8bfe1cb268fc42a4132649edd1f5f189bce468d451f6741f1909f584cdf4fbfb48fbf39d1110e38b46ea0e16a2c41a37e1f4b53b771d80f511dcac89f2b4b4a5579ec08fa29d44c98e1a45e82bf779334128dacfc3585f37ded6158f2aad028c2c77b1dce579a16d919ccd53be069a3b10b63a1e5572be7069d6de729e13f049e572ced352fe3e20e0951c4e31d0857c744b5df95feb7ac96d895e5278a8e82a8043bac27beefde6f680e2233ca641e1c996eef5e57ebcc1ab5e44ffaa077de7135e09a82b6b2ab471af6334c17507045e867d518cf9f36d0d7a1935b6071f10f0e6ccc4d89690c721a764d0206c54297480060a6458e48210cd16f8e6b3e44a9d14dd52c1cfb23ba4ccfe20ff2c4b3c07eb6ce0a2504ea6601a776b3d80bbb0e6e4d7d5ceaf678ca6e63695f06beafa72b97ba35135d0bb40b6fdee3be29272fbd37368b58edc3b18f7c67d36757fcfbdded77f17dfc81427b2ee1964376b3e2c54b30f2496775ef52a28ddc887bd7540654d9769ead08c496f07863de61493358226ff5f701fda69d1822f71aebefdfe9ad6a410c1111f3f234809cb085351d503f4cc5056bfcd1b46694d2bd53cb87809a69f915d136baaeaab96e7511173248b5d551b07c549fb1131fee1ca9059034e561ca7b4c3496364cdcbbe472a715454b2d70e6708d1592eec4c52e44adbdb16b71729d37932198253b9afc6bf2f59b8d56a198a058154125f1e6cae9a0416c537aa4227e19aa684527e3aef16373f7016e5f51a828360c57696335b783573bafb39f56a9d4c0801e6a798483c934f1791f4d9bd0ad714c75a3069af6ef629597bce4d46a6d4f6e080b012ecb30bced9913f7c5984db3a71a0bf0f56c128229529050598b59168eaaff6d2c483067034025fa74d7516775785a94b571ef687eabe9e1ce06531b7165a75e32553169cbe2a7942558b9f39850b7300453c947ab0d2b825b08e9ea330d693fb2d61692f2ae58b1932caa407773d6a9d818d212a5ea9b2c8da782f1fda83cf11d21375cbd122a81ae6d4a4de7fb3ff9b44c49fbcb14d11c38930765bb78064f53b0fca1f96d8320627b970b3fba68f5ff1a888c548aebbe8d64bb0df98120926e996ae631f6e63166cdc524a09b813f441f375bebcc1a2dee8878ffe7afa2d9d526c681b407ed4d08631bef46cd10713ed72b1135522f54cbd401aa52ac041e34efa0c0a07ab3d9e00824aa1f5017fdc5e29bbf63ab9348fca00e4f6b2dcde40cb07a70cfa6af7b46d245c789e80a061bdbef5bfecd753947708b5cd7546c18cdeca1acafb53742cf91b7e287d9390ea63f511f4733e42590b69b252279e70aa6c8368e92dbff74e9d0f83c9cc0e9f1bb9a3a2ce7dc14f75e9bf14140ffe7b51b115c2a4505e0923e8b4e200a209f57dd0cf1110a276336a2b0513c727887f07ef959aa2b17e9e6783564cbcc505ac3931f387d4c53569901992635a5f928de17164cc14239ecac2ae2047c21096f4d3b6429afcb93b1617dab540b717d5775b1fb347c97094d009e7b9e0bdeac64d11e72d477fd258a7a74ab94a41482681cdd31ccb6ae9bf3c7f523f952d04492cf07e5310d142b2ee657f9a28cef3743b6ff396682c0c20af4e124e61aa6d480f39b9017b610834606152b92c5d5e4619e89e500e0d51e0b1119e4f1d7d27a5b071fad4f37345caa1bad2cd125fa82ea67d9e6ec3eb86b3ba9cdde6a423f3e7aec66c94a6fe1232c490032e776e78c2e1639fbf14d7d0dc689dea00366b9ab949d36fa79dad62ef7ae989196bf85a17ec1ad1e66bcf3a1bb888f5cb3e98d39a89c444830f4a7569a34ef521fa7d935900da9a9b23b1ba504f9c5bbe9adb98c92f0f6f928e2bbed666a43bdd3f2146e0a8c6e72c0e6c1f6256fcec7e94bf6b1671bb20bf70f9168258593a5d15983e4ebb8821b24cdd58055ecf61ba6c46e7d88572755ce21318a4a812cb021f2d3f0d7016872cb62f3fa5c95b41d2e4328606687d62685525edaefe97d5a14cdba49ae562a6221cbbdfdc04e79311ae992f665a065a4f64632f462d6f52b9f4483d6989ff6b06dffb1f8269a13d1c6e0760280a05a65965fea5ba42849cc2dd56ffd1277acd13a1a1680ae732b460a715ee18249f22947e00af2371e0a5a0cdacb25b45279d89719900d71b74050742e98ceb02500fe3dbde0d7d75c4f2a81d65374445f648ad6c3c096db8415e79eac68c3274b97d3c69a0730ac6385c6fd2a9d9131ae0243136df89c7f94f581ddde22a3b5e7995f83cb1e252cc8202ff46bc48ea1e6050ba622177b4eadbaf871ada9dea88ed7ba8871213c2957861c514cbd874b9f6d6417005b1e267563312c52fc434e1275921286f6b55bca3118289fc07fe628831aa31c5b9bdb8e551b55f37a1f1accd90eda2ef1387844fa0dd52f6bfb0332d2326b94d236bc67faee7e6f9916a5907527bd821ad0ee7e83b65eb617b9c97fd9b0f85721e540854d3fd6c4a9f0f0be07b4874a9d5c96c39ebe1bd065c0700c2ef30a2d0e160351030c21df55162cc40fc91fdb763a192ee411766ea173269a0bed2ce6191c81952aa97cc104de60ab18aefab7f6fcefdbc6fd6e763896d9513789113397cdba7b13892db6c6323e68a88c2df99ce04b18268c41538f917552f5f00c877cd9bdbc24d41981956d2af63e35f04d78b1b03e0fda904ad339ec422889e5a4162625ef036fca0ad9508842889646d2edb1886a23372340b106cfac853678e48d2c152a821a641f41378b98247a1a348481116f343664d9d865d7acd7fddcbfaf47257e5090d243ace4522a889063ad2f1cb7e9182cd1426060280e03308ab18c7766929bb20987268e41afa66f03473211cecdef620d911e58472b10397045485dab0ff4a9a7bed6cb60e5b125394d2160ecf87c9250a5b5eda613847db8c1c39cc42cf0bb01fc71322380ffa24d1731bd44db51588eecbe27460d8c42b9014895700b21c17ecd57bad0db8a8f792c35dedbc4c51053f8dc8a84a8313fa5be070ea78b789aaaea124fc6765123adfd6f4425fce6b6ba7d05d9bc8f810509c0d44435c6259e87091e0a858425ff23fcd4c299bba6008a67ac0afe8a85abf43f6f6d567dfbf11545e466ee68fc19018719a9f4355a8686289df31d8093ca9c31bfc32edc67b5d40eb880e4bf67607efdfbc8aeab8aa1ed8fdaf883cf8eafa0cebb45822b1a447fdd85ae829d9025c78166e831a7aab451c9f70cb6c4ba598b6ed31da023d9355577b039151039fa58718db092951dd9d903b9d9fe33281cba1b73edc8e7d6eaf1e9cc5b7e1b4b320fc3a2a21b57e35f6129a63ab20d31e8096efc8242920b381d28ddbed55", 0x1000}, {&(0x7f0000000180)="d566ddf590ec93da1d48dd7c70fce84bc8732392fded0f6ffa90ef95e9471511b1be8102d8bacef095c6d48d9c2638e19c719f0d950a66377b", 0x39}, {&(0x7f0000002200)="4d52e7bccf0cdc42ffcc38404bf9ff75bbd1d3732bbba9f3dad34d3b75099da739716a3a5911faa857cfa4d54a4e769c9d45908a07e50c766291964181b85b8e95bc6941814f360013ea70800b73894d31d494d04952421b7b21b54bcb6d0533b1c55d5728e8043b", 0x68}, {&(0x7f0000002280)="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", 0x1000}], 0x7, &(0x7f0000003300)=ANY=[@ANYBLOB="300021010000001d0000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x10}}], 0x1, 0x20000090) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@ipv6_delrule={0x9c, 0x21, 0x20, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x10, 0x8, 0x5, 0x0, 0x0, 0x88476e34c2efbeba, 0x13}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r10}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x9c}}, 0x8004) connect$packet(r3, &(0x7f0000000440)={0x11, 0x15, r6, 0x1, 0x99, 0x6, @multicast}, 0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x4}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) 08:18:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf803000000000000) [ 3306.248056][T20903] memory: usage 307200kB, limit 307200kB, failcnt 69448 [ 3306.257720][T20903] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3306.264649][T20903] Memory cgroup stats for /syz2: [ 3306.264924][T20903] anon 114688 [ 3306.264924][T20903] file 360448 [ 3306.264924][T20903] kernel 314097664 [ 3306.264924][T20903] kernel_stack 65536 [ 3306.264924][T20903] pagetables 69632 [ 3306.264924][T20903] sec_pagetables 0 [ 3306.264924][T20903] percpu 5428704 [ 3306.264924][T20903] sock 0 [ 3306.264924][T20903] vmalloc 0 [ 3306.264924][T20903] shmem 348160 [ 3306.264924][T20903] zswap 0 [ 3306.264924][T20903] zswapped 0 [ 3306.264924][T20903] file_mapped 311296 [ 3306.264924][T20903] file_dirty 12288 [ 3306.264924][T20903] file_writeback 0 [ 3306.264924][T20903] swapcached 0 [ 3306.264924][T20903] anon_thp 0 [ 3306.264924][T20903] file_thp 0 [ 3306.264924][T20903] shmem_thp 0 [ 3306.264924][T20903] inactive_anon 425984 [ 3306.264924][T20903] active_anon 36864 [ 3306.264924][T20903] inactive_file 8192 [ 3306.264924][T20903] active_file 4096 [ 3306.264924][T20903] unevictable 0 [ 3306.264924][T20903] slab_reclaimable 217912 [ 3306.264924][T20903] slab_unreclaimable 308286168 [ 3306.264924][T20903] slab 308504080 [ 3306.264924][T20903] workingset_refault_anon 0 [ 3306.264924][T20903] workingset_refault_file 0 [ 3306.264924][T20903] workingset_activate_anon 0 [ 3306.264924][T20903] workingset_activate_file 0 [ 3306.264924][T20903] workingset_restore_anon 0 [ 3306.264924][T20903] workingset_restore_file 0 [ 3306.264924][T20903] workingset_nodereclaim 0 [ 3306.264924][T20903] pgscan 54144 [ 3306.264924][T20903] pgsteal 455 [ 3306.264924][T20903] pgscan_kswapd 0 [ 3306.264924][T20903] pgscan_direct 54144 [ 3306.264924][T20903] pgscan_khugepaged 0 [ 3306.264924][T20903] pgsteal_kswapd 0 [ 3306.264924][T20903] pgsteal_direct 455 [ 3306.264924][T20903] pgsteal_khugepaged 0 [ 3306.264924][T20903] pgfault 420881 [ 3306.264924][T20903] pgmajfault 1 [ 3306.264924][T20903] pgrefill 178968 [ 3306.264924][T20903] pgactivate 53650 [ 3306.264924][T20903] pgdeactivate 0 [ 3306.264924][T20903] pglazyfree 0 [ 3306.264924][T20903] pglazyfreed 0 [ 3306.264924][T20903] zswpin 0 [ 3306.264924][T20903] zswpout 0 [ 3306.456982][T20903] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20903,uid=0 [ 3306.480348][T20903] Memory cgroup out of memory: Killed process 20903 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3306.505575][T20907] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3306.526935][T20907] CPU: 1 PID: 20907 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3306.537442][T20907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3306.547587][T20907] Call Trace: [ 3306.550919][T20907] [ 3306.553937][T20907] dump_stack_lvl+0x136/0x150 [ 3306.558694][T20907] dump_header+0x10a/0xd70 [ 3306.563184][T20907] oom_kill_process+0x25d/0x600 [ 3306.568111][T20907] out_of_memory+0x35c/0x1660 [ 3306.572879][T20907] ? oom_killer_disable+0x2b0/0x2b0 [ 3306.578161][T20907] ? rcu_read_unlock+0x9/0x60 [ 3306.582902][T20907] ? find_held_lock+0x2d/0x110 [ 3306.587759][T20907] mem_cgroup_out_of_memory+0x206/0x270 [ 3306.593561][T20907] ? mem_cgroup_margin+0x130/0x130 [ 3306.598757][T20907] ? lock_downgrade+0x690/0x690 [ 3306.603698][T20907] try_charge_memcg+0xf9b/0x13b0 [ 3306.608806][T20907] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3306.614841][T20907] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3306.620617][T20907] ? lock_downgrade+0x690/0x690 [ 3306.625506][T20907] ? lock_downgrade+0x690/0x690 [ 3306.630408][T20907] obj_cgroup_charge+0x2af/0x5e0 [ 3306.635389][T20907] ? sock_alloc_inode+0x27/0x1d0 [ 3306.640368][T20907] kmem_cache_alloc_lru+0x142/0x600 [ 3306.645634][T20907] sock_alloc_inode+0x27/0x1d0 [ 3306.650452][T20907] ? sock_free_inode+0x30/0x30 [ 3306.655263][T20907] alloc_inode+0x61/0x230 [ 3306.659663][T20907] new_inode_pseudo+0x17/0x80 [ 3306.664389][T20907] sock_alloc+0x40/0x270 [ 3306.668678][T20907] __sock_create+0xbd/0x850 [ 3306.673235][T20907] __sys_socket+0x133/0x250 [ 3306.677791][T20907] ? __sys_socket_file+0x1d0/0x1d0 [ 3306.682949][T20907] ? kcov_ioctl+0x384/0x6f0 [ 3306.687498][T20907] __x64_sys_socket+0x73/0xb0 [ 3306.692228][T20907] do_syscall_64+0x39/0xb0 [ 3306.696725][T20907] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3306.702659][T20907] RIP: 0033:0x7f0e44a8c169 [ 3306.707100][T20907] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3306.726872][T20907] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3306.735329][T20907] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3306.743347][T20907] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 08:18:33 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3b510300) [ 3306.751450][T20907] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3306.759818][T20907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3306.767831][T20907] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3306.775954][T20907] [ 3306.854087][T20907] memory: usage 307184kB, limit 307200kB, failcnt 72431 [ 3306.861231][T20907] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3306.871156][T20907] Memory cgroup stats for /syz5: [ 3306.871450][T20907] anon 94208 [ 3306.871450][T20907] file 352256 [ 3306.871450][T20907] kernel 314109952 [ 3306.871450][T20907] kernel_stack 65536 [ 3306.871450][T20907] pagetables 73728 [ 3306.871450][T20907] sec_pagetables 0 [ 3306.871450][T20907] percpu 5432688 [ 3306.871450][T20907] sock 0 [ 3306.871450][T20907] vmalloc 20480 [ 3306.871450][T20907] shmem 344064 [ 3306.871450][T20907] zswap 0 [ 3306.871450][T20907] zswapped 0 [ 3306.871450][T20907] file_mapped 327680 [ 3306.871450][T20907] file_dirty 8192 [ 3306.871450][T20907] file_writeback 0 [ 3306.871450][T20907] swapcached 0 [ 3306.871450][T20907] anon_thp 0 [ 3306.871450][T20907] file_thp 0 [ 3306.871450][T20907] shmem_thp 0 [ 3306.871450][T20907] inactive_anon 36864 [ 3306.871450][T20907] active_anon 401408 [ 3306.871450][T20907] inactive_file 8192 [ 3306.871450][T20907] active_file 0 [ 3306.871450][T20907] unevictable 0 [ 3306.871450][T20907] slab_reclaimable 12472 [ 3306.871450][T20907] slab_unreclaimable 308476008 [ 3306.871450][T20907] slab 308488480 [ 3306.871450][T20907] workingset_refault_anon 0 [ 3306.871450][T20907] workingset_refault_file 1 [ 3306.871450][T20907] workingset_activate_anon 0 [ 3306.871450][T20907] workingset_activate_file 0 [ 3306.871450][T20907] workingset_restore_anon 0 [ 3306.871450][T20907] workingset_restore_file 0 [ 3306.871450][T20907] workingset_nodereclaim 0 [ 3306.871450][T20907] pgscan 42078 [ 3306.871450][T20907] pgsteal 445 [ 3306.871450][T20907] pgscan_kswapd 0 [ 3306.871450][T20907] pgscan_direct 42078 [ 3306.871450][T20907] pgscan_khugepaged 0 [ 3306.871450][T20907] pgsteal_kswapd 0 [ 3306.871450][T20907] pgsteal_direct 445 [ 3306.871450][T20907] pgsteal_khugepaged 0 [ 3306.871450][T20907] pgfault 411347 [ 3306.871450][T20907] pgmajfault 0 [ 3306.871450][T20907] pgrefill 138154 [ 3306.871450][T20907] pgactivate 41618 [ 3306.871450][T20907] pgdeactivate 0 [ 3306.871450][T20907] pglazyfree 0 [ 3306.871450][T20907] pglazyfreed 0 [ 3306.871450][T20907] zswpin 0 [ 3306.871450][T20907] zswpout 0 [ 3307.060017][T20907] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20904,uid=0 [ 3307.077251][T20907] Memory cgroup out of memory: Killed process 20904 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:18:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf2580300) [ 3307.109868][T20911] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3307.126892][T20911] CPU: 1 PID: 20911 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3307.137399][T20911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3307.147507][T20911] Call Trace: [ 3307.150832][T20911] [ 3307.153810][T20911] dump_stack_lvl+0x136/0x150 [ 3307.158571][T20911] dump_header+0x10a/0xd70 [ 3307.163071][T20911] oom_kill_process+0x25d/0x600 [ 3307.168000][T20911] out_of_memory+0x35c/0x1660 [ 3307.172763][T20911] ? oom_killer_disable+0x2b0/0x2b0 [ 3307.178040][T20911] ? rcu_read_unlock+0x9/0x60 [ 3307.182790][T20911] ? find_held_lock+0x2d/0x110 [ 3307.187637][T20911] mem_cgroup_out_of_memory+0x206/0x270 [ 3307.193256][T20911] ? mem_cgroup_margin+0x130/0x130 [ 3307.198488][T20911] ? lock_downgrade+0x690/0x690 [ 3307.203441][T20911] try_charge_memcg+0xf9b/0x13b0 [ 3307.208458][T20911] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3307.214512][T20911] ? rcu_read_unlock+0x9/0x60 [ 3307.219266][T20911] ? lock_downgrade+0x690/0x690 [ 3307.224215][T20911] charge_memcg+0x90/0x3b0 [ 3307.228700][T20911] __mem_cgroup_charge+0x2b/0x90 [ 3307.233705][T20911] do_wp_page+0x8eb/0x3520 [ 3307.238205][T20911] ? lock_release+0x670/0x670 [ 3307.242946][T20911] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3307.248386][T20911] ? do_raw_spin_lock+0x124/0x2b0 [ 3307.253479][T20911] ? spin_bug+0x1c0/0x1c0 08:18:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfa03000000000000) 08:18:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcd4b0300) [ 3307.257872][T20911] ? lock_downgrade+0x690/0x690 [ 3307.262821][T20911] __handle_mm_fault+0x19a1/0x3e60 [ 3307.268015][T20911] ? vm_iomap_memory+0x190/0x190 [ 3307.273064][T20911] handle_mm_fault+0x2ba/0x9c0 [ 3307.278006][T20911] do_user_addr_fault+0x475/0x1230 [ 3307.283199][T20911] ? rcu_is_watching+0x12/0xb0 [ 3307.288038][T20911] exc_page_fault+0x98/0x170 [ 3307.292704][T20911] asm_exc_page_fault+0x26/0x30 [ 3307.297630][T20911] RIP: 0033:0x7f9ac6239610 [ 3307.302097][T20911] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3307.321766][T20911] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3307.327980][T20911] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3307.336194][T20911] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3307.344233][T20911] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3307.352348][T20911] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3307.360466][T20911] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3307.368487][T20911] ? __sys_socket+0x7c/0x250 [ 3307.373165][T20911] [ 3307.398642][T20911] memory: usage 307200kB, limit 307200kB, failcnt 69538 [ 3307.405812][T20911] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3307.420222][T20911] Memory cgroup stats for /syz2: [ 3307.420516][T20911] anon 102400 [ 3307.420516][T20911] file 360448 [ 3307.420516][T20911] kernel 314109952 [ 3307.420516][T20911] kernel_stack 65536 [ 3307.420516][T20911] pagetables 69632 [ 3307.420516][T20911] sec_pagetables 0 [ 3307.420516][T20911] percpu 5428768 [ 3307.420516][T20911] sock 0 [ 3307.420516][T20911] vmalloc 0 [ 3307.420516][T20911] shmem 348160 [ 3307.420516][T20911] zswap 0 [ 3307.420516][T20911] zswapped 0 [ 3307.420516][T20911] file_mapped 311296 [ 3307.420516][T20911] file_dirty 12288 [ 3307.420516][T20911] file_writeback 0 [ 3307.420516][T20911] swapcached 0 [ 3307.420516][T20911] anon_thp 0 [ 3307.420516][T20911] file_thp 0 [ 3307.420516][T20911] shmem_thp 0 [ 3307.420516][T20911] inactive_anon 45056 [ 3307.420516][T20911] active_anon 405504 [ 3307.420516][T20911] inactive_file 8192 [ 3307.420516][T20911] active_file 4096 [ 3307.420516][T20911] unevictable 0 [ 3307.420516][T20911] slab_reclaimable 217912 [ 3307.420516][T20911] slab_unreclaimable 308298080 [ 3307.420516][T20911] slab 308515992 [ 3307.420516][T20911] workingset_refault_anon 0 [ 3307.420516][T20911] workingset_refault_file 0 [ 3307.420516][T20911] workingset_activate_anon 0 [ 3307.420516][T20911] workingset_activate_file 0 [ 3307.420516][T20911] workingset_restore_anon 0 [ 3307.420516][T20911] workingset_restore_file 0 [ 3307.420516][T20911] workingset_nodereclaim 0 [ 3307.420516][T20911] pgscan 54144 [ 3307.420516][T20911] pgsteal 455 [ 3307.420516][T20911] pgscan_kswapd 0 [ 3307.420516][T20911] pgscan_direct 54144 [ 3307.420516][T20911] pgscan_khugepaged 0 [ 3307.420516][T20911] pgsteal_kswapd 0 [ 3307.420516][T20911] pgsteal_direct 455 [ 3307.420516][T20911] pgsteal_khugepaged 0 [ 3307.420516][T20911] pgfault 420927 [ 3307.420516][T20911] pgmajfault 1 [ 3307.420516][T20911] pgrefill 179157 [ 3307.420516][T20911] pgactivate 53650 [ 3307.420516][T20911] pgdeactivate 0 [ 3307.420516][T20911] pglazyfree 0 [ 3307.420516][T20911] pglazyfreed 0 [ 3307.420516][T20911] zswpin 0 [ 3307.420516][T20911] zswpout 0 [ 3307.611598][T20911] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20911,uid=0 [ 3307.628884][T20911] Memory cgroup out of memory: Killed process 20911 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3307.646638][T20910] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3307.663900][T20910] CPU: 1 PID: 20910 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3307.674396][T20910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3307.684568][T20910] Call Trace: [ 3307.687884][T20910] [ 3307.690842][T20910] dump_stack_lvl+0x136/0x150 [ 3307.695560][T20910] dump_header+0x10a/0xd70 [ 3307.700015][T20910] oom_kill_process+0x25d/0x600 [ 3307.704904][T20910] out_of_memory+0x35c/0x1660 [ 3307.709625][T20910] ? oom_killer_disable+0x2b0/0x2b0 [ 3307.714859][T20910] ? rcu_read_unlock+0x9/0x60 [ 3307.719572][T20910] ? find_held_lock+0x2d/0x110 [ 3307.724384][T20910] mem_cgroup_out_of_memory+0x206/0x270 [ 3307.730004][T20910] ? mem_cgroup_margin+0x130/0x130 [ 3307.735161][T20910] ? lock_downgrade+0x690/0x690 [ 3307.740060][T20910] try_charge_memcg+0xf9b/0x13b0 [ 3307.745041][T20910] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3307.751071][T20910] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3307.756836][T20910] ? lock_downgrade+0x690/0x690 [ 3307.761720][T20910] ? lock_downgrade+0x690/0x690 [ 3307.766635][T20910] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3307.772232][T20910] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3307.778481][T20910] copy_process+0x4e3/0x7590 [ 3307.783117][T20910] ? folio_flags.constprop.0+0x53/0x150 [ 3307.788710][T20910] ? free_swap_cache+0x1b5/0x3d0 [ 3307.793691][T20910] ? do_wp_page+0x4be/0x3520 [ 3307.798325][T20910] ? __cleanup_sighand+0xb0/0xb0 [ 3307.803305][T20910] ? spin_bug+0x1c0/0x1c0 [ 3307.807668][T20910] ? lock_downgrade+0x690/0x690 [ 3307.812562][T20910] kernel_clone+0xeb/0x890 [ 3307.817015][T20910] ? create_io_thread+0xf0/0xf0 [ 3307.821915][T20910] ? vm_iomap_memory+0x190/0x190 [ 3307.826903][T20910] ? find_held_lock+0x2d/0x110 [ 3307.831732][T20910] __do_sys_clone+0xba/0x100 [ 3307.836458][T20910] ? kernel_clone+0x890/0x890 [ 3307.841189][T20910] ? syscall_enter_from_user_mode+0x26/0x80 [ 3307.847130][T20910] do_syscall_64+0x39/0xb0 [ 3307.851599][T20910] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3307.857528][T20910] RIP: 0033:0x7f461ea8d591 [ 3307.861966][T20910] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3307.881603][T20910] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3307.890045][T20910] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3307.898046][T20910] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3307.906073][T20910] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 08:18:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3c000000) [ 3307.914070][T20910] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3307.922077][T20910] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3307.930095][T20910] [ 3307.944989][T20910] memory: usage 307200kB, limit 307200kB, failcnt 80181 [ 3307.955578][T20910] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3307.971059][T20910] Memory cgroup stats for /syz3: [ 3307.971291][T20910] anon 86016 [ 3307.971291][T20910] file 360448 [ 3307.971291][T20910] kernel 314126336 [ 3307.971291][T20910] kernel_stack 32768 [ 3307.971291][T20910] pagetables 69632 [ 3307.971291][T20910] sec_pagetables 0 [ 3307.971291][T20910] percpu 5432320 [ 3307.971291][T20910] sock 0 [ 3307.971291][T20910] vmalloc 8192 [ 3307.971291][T20910] shmem 339968 [ 3307.971291][T20910] zswap 0 [ 3307.971291][T20910] zswapped 0 [ 3307.971291][T20910] file_mapped 327680 [ 3307.971291][T20910] file_dirty 16384 [ 3307.971291][T20910] file_writeback 0 [ 3307.971291][T20910] swapcached 0 [ 3307.971291][T20910] anon_thp 0 [ 3307.971291][T20910] file_thp 0 [ 3307.971291][T20910] shmem_thp 0 [ 3307.971291][T20910] inactive_anon 380928 [ 3307.971291][T20910] active_anon 45056 [ 3307.971291][T20910] inactive_file 0 [ 3307.971291][T20910] active_file 20480 [ 3307.971291][T20910] unevictable 0 [ 3307.971291][T20910] slab_reclaimable 36944 [ 3307.971291][T20910] slab_unreclaimable 308494152 [ 3307.971291][T20910] slab 308531096 [ 3307.971291][T20910] workingset_refault_anon 0 [ 3307.971291][T20910] workingset_refault_file 2 [ 3307.971291][T20910] workingset_activate_anon 0 [ 3307.971291][T20910] workingset_activate_file 0 [ 3307.971291][T20910] workingset_restore_anon 0 [ 3307.971291][T20910] workingset_restore_file 0 [ 3307.971291][T20910] workingset_nodereclaim 0 [ 3307.971291][T20910] pgscan 54660 [ 3307.971291][T20910] pgsteal 449 [ 3307.971291][T20910] pgscan_kswapd 0 [ 3307.971291][T20910] pgscan_direct 54660 [ 3307.971291][T20910] pgscan_khugepaged 0 [ 3307.971291][T20910] pgsteal_kswapd 0 [ 3307.971291][T20910] pgsteal_direct 449 [ 3307.971291][T20910] pgsteal_khugepaged 0 [ 3307.971291][T20910] pgfault 415434 [ 3307.971291][T20910] pgmajfault 1 [ 3307.971291][T20910] pgrefill 199632 [ 3307.971291][T20910] pgactivate 54202 [ 3307.971291][T20910] pgdeactivate 0 [ 3307.971291][T20910] pglazyfree 0 [ 3307.971291][T20910] pglazyfreed 0 [ 3307.971291][T20910] zswpin 0 [ 3307.971291][T20910] zswpout 0 [ 3308.172834][T20910] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20910,uid=0 [ 3308.197568][T20910] Memory cgroup out of memory: Killed process 20910 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3308.232448][T20915] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3308.255869][T20915] CPU: 0 PID: 20915 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3308.266375][T20915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3308.276487][T20915] Call Trace: [ 3308.279817][T20915] [ 3308.282800][T20915] dump_stack_lvl+0x136/0x150 [ 3308.287547][T20915] dump_header+0x10a/0xd70 [ 3308.292036][T20915] oom_kill_process+0x25d/0x600 [ 3308.296954][T20915] out_of_memory+0x35c/0x1660 [ 3308.301703][T20915] ? oom_killer_disable+0x2b0/0x2b0 [ 3308.306976][T20915] ? rcu_read_unlock+0x9/0x60 [ 3308.311719][T20915] ? find_held_lock+0x2d/0x110 [ 3308.316570][T20915] mem_cgroup_out_of_memory+0x206/0x270 [ 3308.322178][T20915] ? mem_cgroup_margin+0x130/0x130 [ 3308.327324][T20915] ? lock_downgrade+0x690/0x690 [ 3308.332308][T20915] try_charge_memcg+0xf9b/0x13b0 [ 3308.337295][T20915] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3308.343312][T20915] ? rcu_read_unlock+0x9/0x60 [ 3308.348023][T20915] ? lock_downgrade+0x690/0x690 [ 3308.352916][T20915] charge_memcg+0x90/0x3b0 [ 3308.357399][T20915] __mem_cgroup_charge+0x2b/0x90 [ 3308.362365][T20915] ? copy_mc_to_kernel+0x3e/0x90 [ 3308.367352][T20915] do_wp_page+0x8eb/0x3520 [ 3308.371816][T20915] ? lock_release+0x670/0x670 [ 3308.376532][T20915] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3308.381947][T20915] ? do_raw_spin_lock+0x124/0x2b0 [ 3308.387007][T20915] ? spin_bug+0x1c0/0x1c0 [ 3308.391381][T20915] ? lock_downgrade+0x690/0x690 [ 3308.396277][T20915] __handle_mm_fault+0x19a1/0x3e60 [ 3308.401453][T20915] ? vm_iomap_memory+0x190/0x190 [ 3308.406457][T20915] handle_mm_fault+0x2ba/0x9c0 [ 3308.411281][T20915] do_user_addr_fault+0x475/0x1230 [ 3308.416460][T20915] ? rcu_is_watching+0x12/0xb0 [ 3308.421269][T20915] exc_page_fault+0x98/0x170 [ 3308.425898][T20915] asm_exc_page_fault+0x26/0x30 [ 3308.430790][T20915] RIP: 0033:0x7f0e44a36fdd [ 3308.435229][T20915] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3308.455038][T20915] RSP: 002b:00007ffc44a97950 EFLAGS: 00010217 [ 3308.461133][T20915] RAX: 0000000000000000 RBX: 00007f0e44babf8c RCX: 00007f0e44a8c169 [ 3308.469132][T20915] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e44babf88 [ 3308.477216][T20915] RBP: 00007f0e44babf80 R08: 00007f0e458bd700 R09: 0000000000000000 [ 3308.485211][T20915] R10: 00007f0e458bd700 R11: 0000000000000246 R12: 00007f0e44babf8c [ 3308.493307][T20915] R13: 00007f0e44600060 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3308.501320][T20915] [ 3308.569710][T20915] memory: usage 307200kB, limit 307200kB, failcnt 72554 [ 3308.581299][T20915] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3308.595100][T20913] warn_alloc: 5 callbacks suppressed [ 3308.595123][T20913] syz-executor.4: vmalloc error: size 0, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3308.606342][T20915] Memory cgroup stats for [ 3308.631369][T20913] ,cpuset=syz4,mems_allowed=0-1 [ 3308.641337][T20915] /syz5: [ 3308.641594][T20915] anon 90112 [ 3308.641594][T20915] file 356352 [ 3308.641594][T20915] kernel 314126336 [ 3308.641594][T20915] kernel_stack 65536 [ 3308.641594][T20915] pagetables 73728 [ 3308.641594][T20915] sec_pagetables 0 [ 3308.641594][T20915] percpu 5432752 [ 3308.641594][T20915] sock 0 [ 3308.641594][T20915] vmalloc 20480 [ 3308.641594][T20915] shmem 344064 [ 3308.641594][T20915] zswap 0 [ 3308.641594][T20915] zswapped 0 [ 3308.641594][T20915] file_mapped 327680 [ 3308.641594][T20915] file_dirty 8192 [ 3308.641594][T20915] file_writeback 0 [ 3308.641594][T20915] swapcached 0 [ 3308.641594][T20915] anon_thp 0 [ 3308.641594][T20915] file_thp 0 [ 3308.641594][T20915] shmem_thp 0 [ 3308.641594][T20915] inactive_anon 36864 [ 3308.641594][T20915] active_anon 397312 [ 3308.641594][T20915] inactive_file 12288 [ 3308.641594][T20915] active_file 0 [ 3308.641594][T20915] unevictable 0 [ 3308.641594][T20915] slab_reclaimable 12712 [ 3308.641594][T20915] slab_unreclaimable 308487616 [ 3308.641594][T20915] slab 308500328 [ 3308.641594][T20915] workingset_refault_anon 0 [ 3308.641594][T20915] workingset_refault_file 1 [ 3308.641594][T20915] workingset_activate_anon 0 [ 3308.641594][T20915] workingset_activate_file 0 [ 3308.641594][T20915] workingset_restore_anon 0 [ 3308.641594][T20915] workingset_restore_file 0 [ 3308.641594][T20915] workingset_nodereclaim 0 [ 3308.641594][T20915] pgscan 42117 [ 3308.641594][T20915] pgsteal 445 [ 3308.641594][T20915] pgscan_kswapd 0 [ 3308.641594][T20915] pgscan_direct 42117 [ 3308.641594][T20915] pgscan_khugepaged 0 [ 3308.641594][T20915] pgsteal_kswapd 0 [ 3308.641594][T20915] pgsteal_direct 445 [ 3308.641594][T20915] pgsteal_khugepaged 0 [ 3308.641594][T20915] pgfault 411388 [ 3308.641594][T20915] pgmajfault 0 [ 3308.641594][T20915] pgrefill 138322 [ 3308.641594][T20915] pgactivate 41657 [ 3308.641594][T20915] pgdeactivate 0 [ 3308.641594][T20915] pglazyfree 0 [ 3308.641594][T20915] pglazyfreed 0 08:18:35 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x28, 0x11, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x6810, 0x460}, [@IFLA_OPERSTATE={0x5, 0x10, 0x3}]}, 0x28}}, 0x40000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x7, 0x5}) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@ipv4_getaddr={0x28, 0x16, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x1f, 0x119}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x8080) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=@ipv4_getaddr={0x28, 0x16, 0x800, 0x70bd29, 0x25dfdbff, {0x2, 0x1f, 0x119}, [@IFA_LOCAL={0x8, 0x2, @empty}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x28}, 0x1, 0x0, 0x0, 0x44041}, 0x8080) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="48800000240051333302f0ae8e454bace086ad7839f4cfe8ce", @ANYRES32=r6, @ANYBLOB="00000000ffffffff0000000008000100636273001c000f0018000100"/48], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={0xffffffffffffffff, &(0x7f0000000680)="d0b57cf9e236fb837ea941332cf2c6467d2d6fc2c0ba3b44902602cc9e1ffdfddec3d72dfed8836d4f56ec54e28991b464de8d519f60d74ff32d113f837cd60b5b8fd0774238fea14776f2a70fbfff10c68446c24cde2127f614545d492ec82e0739f734863f7c319e744c913a36c547b4e59e15ab70afc65119d83a04db58fabf47425e6d542c8b56a8a13d6e527ebc51fc51a894a7f282434481b76f3270e05f7f3f59031abac954da6e92c8b06ea34892598df664be19066118408d7ec9cf386f1304ceda504465d6ba2f00b4cfc371921c1a463b90a42292f4", &(0x7f0000000900)=@udp}, 0x20) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r7, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0x1) (async) ioctl$int_in(r7, 0x5452, &(0x7f00000002c0)=0x1) shutdown(r7, 0x1) (async) shutdown(r7, 0x1) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) (async) recvmsg(r7, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = getpid() getuid() (async) r10 = getuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x81}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7, 0x4e20, 0x4, 0xa, 0xa0, 0xa0, 0x87, 0x0, r10}, {0xebc, 0x1567d527, 0x1, 0x0, 0x3, 0x8, 0x40, 0x3}, {0x4f5, 0x40000000000000, 0xa8, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x3506, 0x1, 0x0, 0x54, 0x0, 0x80000000}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@dev={0xac, 0x14, 0x14, 0x81}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e22, 0x7, 0x4e20, 0x4, 0xa, 0xa0, 0xa0, 0x87, 0x0, r10}, {0xebc, 0x1567d527, 0x1, 0x0, 0x3, 0x8, 0x40, 0x3}, {0x4f5, 0x40000000000000, 0xa8, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@broadcast, 0x4d2, 0xff}, 0xa, @in6=@private1, 0x3506, 0x1, 0x0, 0x54, 0x0, 0x80000000}}, 0xe8) setsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000100)={r9, r10}, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003380)=[{{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003280)=[{&(0x7f00000000c0)="8e27f8b327b08b25e048ce11f0a6d89a2919a9d02158c33a537d0a61be5e2a756ca64b2ca64f59f91fd032b8cf7ce7747e8974", 0x33}, {&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000000140)="838f7f7e68a2eef8e46034426d8c8c41c25bfc1ce49df0c1", 0x18}, {&(0x7f0000001200)="a70d02a97565c55cdea6e1aa1ac03c31916b6d7c827c68fcfa52407489af2e0feab2f911bf8cedf71634d178cd5e90b637f4350dd55a55a16b63e99b2726497a39cc080dff30257997e9e3bb10908f4c0e5cf900a2a322c0a3dc1e3e179d1dbf2a0c3779be20f76b22faba6cf7fbaaff925cd7ce463cdc13a94ee1c1280620aa8a19088f93f32d5f3c3edff9e712f7c0cd3cfc5a57e42686468c75cd425c2d9acdbf57b26e4bfc91480d3e722e8d9dee996b4c654d2eadf7007929cdfda1eda40c0eac3c73a2fb4c52b9b78bd9ed682a522ecd270c657f3905ac0bb4f2dc21fcbdec12af5ab0a2307f10342b8ec064bf54010aea57dfea05b1a193a166ae42fd7bdfa749fc0fcaad268a7133d8227afc86e07c0b4c8c4e303f34dad4093e60ee50f7a44e893fd26885076f1a7210df6de9a9715808230db6cf638fd01e92acf1ad8900be7d7d862c69b8ddc7f01eb2257c9eb96fdc31d74c2ed847627fc3da9b363d8faebad6ca62492e8c12e9c1a65bcfab3736be074e9eb22be38ae3187387b4cccb23d040b6b382ab3afc68e9749d8a9ae7c794a39a772e57577372e5c55b3c4c10637705e56c4d57e0a0e603812cc812f90da46242028f2a7f91c391ceac5135d47247990fb897109cb669f8c46b996022fab811e91b572d001567c9b1fea2b40aeb6141d439e597563d66f1d0845b21d5a77e7d577d815189870c67858ee82063759de8de59d36b990e0b95c513bbf6ad263f8be63eb8c40ea81a042de6e1c6fc5ca67a18d8eafc1c8b5a4cc33c0adbe3b8c3525a947f8170a263445499a1ec3d8adc97a38b1f725187b47ec6ee5e39164180d87aa31007a89f9e54eb5a327e472ed4a28db5f210836223bcf56b07a4ba112a22d2c5b48aa216c118d0910ec8bcf7c3abff65d283a3b0e873ceab7cead9a07e26e222176b466222b264ad6a93a7e6f8b91d3260111368040231d3b8364cb20699c589486b96f73e03c3ab38ff8cb82d9cce65fc4996768c6e91600829041aae24adb80678d1c5bc89a34e84a2efb5eee671255a3626e7285e8a7e3b9f0e61cf88c71ac65a659999938b9d43b3d444f27b0ea08bbfc3b815a9561ffa3486b0a34be0dfd2fc3897aff839d222683321c93bd738f7704fe795822f8014aeed08c126b41d84f5b00f677b4981291c8b3d686582daa5b4adff63c803a99aacd69469c79c552db313b735f67c42ce058312514a85a02d823a81c21850713aaf8a94bb22d2cceacce48da183aa4562abf24451fd8b58cd24a41527a085b93b7f21c41bd162cec86253c24395647c347ca8561e04524bdaf5333681d5d7e04b23028418cf054b0ba874922cde9e671147e40789d1fc0eb7d57e80b8e55f935670364ac07b3a8090e0d47a8e00f6462cd44cd55a65d82f64417539ae31262ee96b698359895d9f7db2a999ccedbac7cb4c028566b5f41572a6fb4b9c1bbf53b03dc078a6357d9eca0a518749e356a754cea7ce4ab30377ef6fb3a28f7364d3324462eb33b2562f66f886b7b14781d1341f9a4e4a965f99b5db3317003700a5a2ffc409babfe3042b2f3cba66e856ecc9fd22747c482070c0c6c11f4dfb0a38387b2cc29e38883e643c2a5586effe3237370b310fd4fabcc907573fd964c0b4214563b596ac920bda3ec707597b3927a5780afd5cbe5d81411ae908410a83c2b54abe282e98a763528394d28b6c2f0a5f9352d626a585f85c8e0b984e2249a50ccb590f295c97b1985aeb3f9889766d5b1367faf6bfe00d033491bded5dab72300675cbfb3d87ef9baaa398eb13df90c19052623c76bbbeb1901aad9bfec172fd18fe091f2c3f3d80089e394e60c7f8533cf5ee14749a7ae86180ddf5db445ed059e856f2f76c09f0c134702b33c2e87521fa51d1a4d8b1658ce0ae163bc6bc71428069d612b026f41a74ccaa8cd543587643b685c95f6ec3efe85164bc0750214faec5bf5c27f36cf95e711787cd2ca06c9df5fe767180afb423c0d8b56f13e02540cd57c4f17fb27917bfbb23e5ead0ac83cb1b188738bf873d2acf5d24d4d37c0c74c4f8138a3455d21efebd4c51c8385d0f73b438d5e58d0456ebdcde6ab9e9280df9f9726fc5411bac1cf867ac50fe0fab0cb4b564d63d6f12e01e42b2ed7cd782cb588ea96f57f6d45252d9dfefd95d93cf4e8962e4cfe1246dc3f42ab4c3156a3142c1c6672622478c3966d2bae11f88db1c3bf712ff88571faef31e688a86b56a4ff52b5abddb0fdeeb2171331d2e43bcca26d04a65fae3a15161ab54dfa553da2f4355630f26ac9cd102910873c8e71fcb2723cdf06511e86ae0858019efe9ec03682a7815773135ba645c1ec81df879c3d31762209bede57c5aff710357d0a855a5d778356cd4075987a4327a738b63b75da75be59017f7bbc888e995b63e8bfe1cb268fc42a4132649edd1f5f189bce468d451f6741f1909f584cdf4fbfb48fbf39d1110e38b46ea0e16a2c41a37e1f4b53b771d80f511dcac89f2b4b4a5579ec08fa29d44c98e1a45e82bf779334128dacfc3585f37ded6158f2aad028c2c77b1dce579a16d919ccd53be069a3b10b63a1e5572be7069d6de729e13f049e572ced352fe3e20e0951c4e31d0857c744b5df95feb7ac96d895e5278a8e82a8043bac27beefde6f680e2233ca641e1c996eef5e57ebcc1ab5e44ffaa077de7135e09a82b6b2ab471af6334c17507045e867d518cf9f36d0d7a1935b6071f10f0e6ccc4d89690c721a764d0206c54297480060a6458e48210cd16f8e6b3e44a9d14dd52c1cfb23ba4ccfe20ff2c4b3c07eb6ce0a2504ea6601a776b3d80bbb0e6e4d7d5ceaf678ca6e63695f06beafa72b97ba35135d0bb40b6fdee3be29272fbd37368b58edc3b18f7c67d36757fcfbdded77f17dfc81427b2ee1964376b3e2c54b30f2496775ef52a28ddc887bd7540654d9769ead08c496f07863de61493358226ff5f701fda69d1822f71aebefdfe9ad6a410c1111f3f234809cb085351d503f4cc5056bfcd1b46694d2bd53cb87809a69f915d136baaeaab96e7511173248b5d551b07c549fb1131fee1ca9059034e561ca7b4c3496364cdcbbe472a715454b2d70e6708d1592eec4c52e44adbdb16b71729d37932198253b9afc6bf2f59b8d56a198a058154125f1e6cae9a0416c537aa4227e19aa684527e3aef16373f7016e5f51a828360c57696335b783573bafb39f56a9d4c0801e6a798483c934f1791f4d9bd0ad714c75a3069af6ef629597bce4d46a6d4f6e080b012ecb30bced9913f7c5984db3a71a0bf0f56c128229529050598b59168eaaff6d2c483067034025fa74d7516775785a94b571ef687eabe9e1ce06531b7165a75e32553169cbe2a7942558b9f39850b7300453c947ab0d2b825b08e9ea330d693fb2d61692f2ae58b1932caa407773d6a9d818d212a5ea9b2c8da782f1fda83cf11d21375cbd122a81ae6d4a4de7fb3ff9b44c49fbcb14d11c38930765bb78064f53b0fca1f96d8320627b970b3fba68f5ff1a888c548aebbe8d64bb0df98120926e996ae631f6e63166cdc524a09b813f441f375bebcc1a2dee8878ffe7afa2d9d526c681b407ed4d08631bef46cd10713ed72b1135522f54cbd401aa52ac041e34efa0c0a07ab3d9e00824aa1f5017fdc5e29bbf63ab9348fca00e4f6b2dcde40cb07a70cfa6af7b46d245c789e80a061bdbef5bfecd753947708b5cd7546c18cdeca1acafb53742cf91b7e287d9390ea63f511f4733e42590b69b252279e70aa6c8368e92dbff74e9d0f83c9cc0e9f1bb9a3a2ce7dc14f75e9bf14140ffe7b51b115c2a4505e0923e8b4e200a209f57dd0cf1110a276336a2b0513c727887f07ef959aa2b17e9e6783564cbcc505ac3931f387d4c53569901992635a5f928de17164cc14239ecac2ae2047c21096f4d3b6429afcb93b1617dab540b717d5775b1fb347c97094d009e7b9e0bdeac64d11e72d477fd258a7a74ab94a41482681cdd31ccb6ae9bf3c7f523f952d04492cf07e5310d142b2ee657f9a28cef3743b6ff396682c0c20af4e124e61aa6d480f39b9017b610834606152b92c5d5e4619e89e500e0d51e0b1119e4f1d7d27a5b071fad4f37345caa1bad2cd125fa82ea67d9e6ec3eb86b3ba9cdde6a423f3e7aec66c94a6fe1232c490032e776e78c2e1639fbf14d7d0dc689dea00366b9ab949d36fa79dad62ef7ae989196bf85a17ec1ad1e66bcf3a1bb888f5cb3e98d39a89c444830f4a7569a34ef521fa7d935900da9a9b23b1ba504f9c5bbe9adb98c92f0f6f928e2bbed666a43bdd3f2146e0a8c6e72c0e6c1f6256fcec7e94bf6b1671bb20bf70f9168258593a5d15983e4ebb8821b24cdd58055ecf61ba6c46e7d88572755ce21318a4a812cb021f2d3f0d7016872cb62f3fa5c95b41d2e4328606687d62685525edaefe97d5a14cdba49ae562a6221cbbdfdc04e79311ae992f665a065a4f64632f462d6f52b9f4483d6989ff6b06dffb1f8269a13d1c6e0760280a05a65965fea5ba42849cc2dd56ffd1277acd13a1a1680ae732b460a715ee18249f22947e00af2371e0a5a0cdacb25b45279d89719900d71b74050742e98ceb02500fe3dbde0d7d75c4f2a81d65374445f648ad6c3c096db8415e79eac68c3274b97d3c69a0730ac6385c6fd2a9d9131ae0243136df89c7f94f581ddde22a3b5e7995f83cb1e252cc8202ff46bc48ea1e6050ba622177b4eadbaf871ada9dea88ed7ba8871213c2957861c514cbd874b9f6d6417005b1e267563312c52fc434e1275921286f6b55bca3118289fc07fe628831aa31c5b9bdb8e551b55f37a1f1accd90eda2ef1387844fa0dd52f6bfb0332d2326b94d236bc67faee7e6f9916a5907527bd821ad0ee7e83b65eb617b9c97fd9b0f85721e540854d3fd6c4a9f0f0be07b4874a9d5c96c39ebe1bd065c0700c2ef30a2d0e160351030c21df55162cc40fc91fdb763a192ee411766ea173269a0bed2ce6191c81952aa97cc104de60ab18aefab7f6fcefdbc6fd6e763896d9513789113397cdba7b13892db6c6323e68a88c2df99ce04b18268c41538f917552f5f00c877cd9bdbc24d41981956d2af63e35f04d78b1b03e0fda904ad339ec422889e5a4162625ef036fca0ad9508842889646d2edb1886a23372340b106cfac853678e48d2c152a821a641f41378b98247a1a348481116f343664d9d865d7acd7fddcbfaf47257e5090d243ace4522a889063ad2f1cb7e9182cd1426060280e03308ab18c7766929bb20987268e41afa66f03473211cecdef620d911e58472b10397045485dab0ff4a9a7bed6cb60e5b125394d2160ecf87c9250a5b5eda613847db8c1c39cc42cf0bb01fc71322380ffa24d1731bd44db51588eecbe27460d8c42b9014895700b21c17ecd57bad0db8a8f792c35dedbc4c51053f8dc8a84a8313fa5be070ea78b789aaaea124fc6765123adfd6f4425fce6b6ba7d05d9bc8f810509c0d44435c6259e87091e0a858425ff23fcd4c299bba6008a67ac0afe8a85abf43f6f6d567dfbf11545e466ee68fc19018719a9f4355a8686289df31d8093ca9c31bfc32edc67b5d40eb880e4bf67607efdfbc8aeab8aa1ed8fdaf883cf8eafa0cebb45822b1a447fdd85ae829d9025c78166e831a7aab451c9f70cb6c4ba598b6ed31da023d9355577b039151039fa58718db092951dd9d903b9d9fe33281cba1b73edc8e7d6eaf1e9cc5b7e1b4b320fc3a2a21b57e35f6129a63ab20d31e8096efc8242920b381d28ddbed55", 0x1000}, {&(0x7f0000000180)="d566ddf590ec93da1d48dd7c70fce84bc8732392fded0f6ffa90ef95e9471511b1be8102d8bacef095c6d48d9c2638e19c719f0d950a66377b", 0x39}, {&(0x7f0000002200)="4d52e7bccf0cdc42ffcc38404bf9ff75bbd1d3732bbba9f3dad34d3b75099da739716a3a5911faa857cfa4d54a4e769c9d45908a07e50c766291964181b85b8e95bc6941814f360013ea70800b73894d31d494d04952421b7b21b54bcb6d0533b1c55d5728e8043b", 0x68}, {&(0x7f0000002280)="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", 0x1000}], 0x7, &(0x7f0000003300)=ANY=[@ANYBLOB="300021010000001d0000000000000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYBLOB="100000000000000001000000010000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x60, 0x10}}], 0x1, 0x20000090) sendmsg$nl_route(r1, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=@ipv6_delrule={0x9c, 0x21, 0x20, 0x70bd2c, 0x25dfdbff, {0xa, 0x14, 0x10, 0x8, 0x5, 0x0, 0x0, 0x88476e34c2efbeba, 0x13}, [@FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}, @FRA_DST={0x14, 0x1, @empty}, @FRA_SRC={0x14, 0x2, @empty}, @FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'virt_wifi0\x00'}, @FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x14, {0x0, r10}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}, @FRA_DST={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'ip6erspan0\x00'}]}, 0x9c}}, 0x8004) connect$packet(r3, &(0x7f0000000440)={0x11, 0x15, r6, 0x1, 0x99, 0x6, @multicast}, 0x14) (async) connect$packet(r3, &(0x7f0000000440)={0x11, 0x15, r6, 0x1, 0x99, 0x6, @multicast}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@getstats={0x1c, 0x5e, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x4}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) [ 3308.641594][T20915] zswpin 0 [ 3308.641594][T20915] zswpout 0 [ 3308.840238][T20913] CPU: 1 PID: 20913 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3308.850748][T20913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3308.861040][T20913] Call Trace: [ 3308.864720][T20913] [ 3308.867727][T20913] dump_stack_lvl+0x136/0x150 [ 3308.872485][T20913] warn_alloc+0x213/0x360 [ 3308.876889][T20913] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3308.882542][T20913] __vmalloc_node_range+0x1021/0x14a0 [ 3308.888019][T20913] ? alloc_netdev_mqs+0x9c/0x1250 [ 3308.893144][T20913] ? delayed_vfree_work+0x70/0x70 [ 3308.898302][T20913] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3308.902396][T20915] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3308.904044][T20913] ? kvmalloc_node+0x76/0x1a0 [ 3308.904084][T20913] ? rcu_is_watching+0x12/0xb0 [ 3308.904130][T20913] ? alloc_netdev_mqs+0x9c/0x1250 [ 3308.916312][T20915] ,cpuset= [ 3308.920863][T20913] kvmalloc_node+0x156/0x1a0 [ 3308.920907][T20913] ? alloc_netdev_mqs+0x9c/0x1250 [ 3308.920946][T20913] alloc_netdev_mqs+0x9c/0x1250 [ 3308.920981][T20913] ? security_capable+0x93/0xc0 [ 3308.921010][T20913] ? br_netpoll_disable+0x60/0x60 [ 3308.921054][T20913] rtnl_create_link+0xbeb/0xee0 [ 3308.921103][T20913] __rtnl_newlink+0xfd4/0x1840 [ 3308.921160][T20913] ? find_held_lock+0x2d/0x110 [ 3308.921213][T20913] ? rtnl_link_unregister+0x250/0x250 [ 3308.921263][T20913] ? __kmem_cache_alloc_node+0x48/0x320 [ 3308.934563][T20915] syz5 [ 3308.939079][T20913] ? rtnl_newlink+0x4a/0xa0 [ 3308.945663][T20915] ,mems_allowed=0-1 [ 3308.948767][T20913] rtnl_newlink+0x68/0xa0 [ 3308.948819][T20913] ? __rtnl_newlink+0x1840/0x1840 [ 3308.948865][T20913] rtnetlink_rcv_msg+0x43d/0xd50 [ 3308.948912][T20913] ? rtnl_stats_set+0x4d0/0x4d0 [ 3308.948954][T20913] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3308.949016][T20913] netlink_rcv_skb+0x165/0x440 [ 3308.949061][T20913] ? rtnl_stats_set+0x4d0/0x4d0 [ 3308.949106][T20913] ? netlink_ack+0x1360/0x1360 [ 3308.949172][T20913] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3308.962393][T20915] ,oom_memcg= [ 3308.963850][T20913] netlink_unicast+0x547/0x7f0 [ 3308.963911][T20913] ? netlink_attachskb+0x890/0x890 [ 3308.970641][T20915] /syz5 [ 3308.974051][T20913] ? __virt_addr_valid+0x61/0x2e0 [ 3308.987160][T20915] ,task_memcg= [ 3308.990651][T20913] ? __phys_addr_symbol+0x30/0x70 [ 3308.990709][T20913] ? __check_object_size+0x333/0x6e0 [ 3308.990760][T20913] netlink_sendmsg+0x925/0xe30 [ 3309.004597][T20915] /syz5 [ 3309.005089][T20913] ? netlink_unicast+0x7f0/0x7f0 [ 3309.011924][T20915] ,task=syz-executor.5,pid=20915,uid=0 [ 3309.015043][T20913] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3309.015094][T20913] ? netlink_unicast+0x7f0/0x7f0 [ 3309.015135][T20913] sock_sendmsg+0xde/0x190 [ 3309.015179][T20913] ____sys_sendmsg+0x71c/0x900 [ 3309.015232][T20913] ? copy_msghdr_from_user+0xfc/0x150 [ 3309.015278][T20913] ? kernel_sendmsg+0x50/0x50 [ 3309.015330][T20913] ? futex_unqueue+0xb7/0x120 [ 3309.015380][T20913] ? futex_wait+0x503/0x680 [ 3309.015432][T20913] ___sys_sendmsg+0x110/0x1b0 [ 3309.015481][T20913] ? do_recvmmsg+0x6e0/0x6e0 [ 3309.015533][T20913] ? __fget_files+0x248/0x480 [ 3309.015584][T20913] ? lock_downgrade+0x690/0x690 [ 3309.015637][T20913] ? __fget_files+0x26a/0x480 [ 3309.015700][T20913] ? __fget_light+0xe5/0x270 [ 3309.015758][T20913] __sys_sendmsg+0xf7/0x1c0 [ 3309.015809][T20913] ? __sys_sendmsg_sock+0x40/0x40 [ 3309.015861][T20913] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3309.015933][T20913] ? syscall_enter_from_user_mode+0x26/0x80 [ 3309.031714][T20915] Memory cgroup out of memory: Killed process 20915 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3309.035621][T20913] ? lockdep_hardirqs_on+0x7d/0x100 [ 3309.035676][T20913] do_syscall_64+0x39/0xb0 [ 3309.076164][T20918] socket: no more sockets [ 3309.078145][T20913] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3309.078197][T20913] RIP: 0033:0x7f79ea88c169 [ 3309.078232][T20913] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3309.078266][T20913] RSP: 002b:00007f79eb505168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3309.078298][T20913] RAX: ffffffffffffffda RBX: 00007f79ea9abf80 RCX: 00007f79ea88c169 [ 3309.078320][T20913] RDX: c403000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3309.078344][T20913] RBP: 00007f79ea8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3309.078365][T20913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3309.078386][T20913] R13: 00007ffd939e5d3f R14: 00007f79eb505300 R15: 0000000000022000 [ 3309.078428][T20913] [ 3309.199884][T20919] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3309.210148][T20913] Mem-Info: [ 3309.231447][T20919] CPU: 1 PID: 20919 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3309.243724][T20913] active_anon:82473 inactive_anon:1069 isolated_anon:0 [ 3309.243724][T20913] active_file:10 inactive_file:15591 isolated_file:0 [ 3309.243724][T20913] unevictable:768 dirty:30 writeback:0 [ 3309.243724][T20913] slab_reclaimable:30895 slab_unreclaimable:953854 [ 3309.243724][T20913] mapped:19747 shmem:2076 pagetables:682 [ 3309.243724][T20913] sec_pagetables:0 bounce:0 [ 3309.243724][T20913] kernel_misc_reclaimable:0 [ 3309.243724][T20913] free:452065 free_pcp:15085 free_cma:0 [ 3309.250049][T20919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3309.250071][T20919] Call Trace: [ 3309.250080][T20919] [ 3309.250093][T20919] dump_stack_lvl+0x136/0x150 [ 3309.250139][T20919] dump_header+0x10a/0xd70 [ 3309.250182][T20919] oom_kill_process+0x25d/0x600 [ 3309.250231][T20919] out_of_memory+0x35c/0x1660 [ 3309.260580][T20913] Node 0 active_anon:329460kB inactive_anon:3712kB active_file:8kB inactive_file:57540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 3309.266225][T20919] ? oom_killer_disable+0x2b0/0x2b0 [ 3309.274975][T20913] Node 1 active_anon:432kB inactive_anon:564kB active_file:32kB inactive_file:4824kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:68kB writeback:0kB shmem:1872kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:560kB pagetables:380kB sec_pagetables:0kB all_unreclaimable? no [ 3309.282229][T20919] ? rcu_read_unlock+0x9/0x60 [ 3309.282278][T20919] ? find_held_lock+0x2d/0x110 [ 3309.282331][T20919] mem_cgroup_out_of_memory+0x206/0x270 [ 3309.282375][T20919] ? mem_cgroup_margin+0x130/0x130 [ 3309.282415][T20919] ? lock_downgrade+0x690/0x690 [ 3309.291487][T20913] Node 0 [ 3309.293443][T20919] try_charge_memcg+0xf9b/0x13b0 [ 3309.293492][T20919] ? mem_cgroup_handle_over_high+0x520/0x520 08:18:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xce4b0300) [ 3309.304617][T20913] DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:96kB free_cma:0kB [ 3309.306745][T20919] ? rcu_read_unlock+0x9/0x60 [ 3309.306792][T20919] ? lock_downgrade+0x690/0x690 [ 3309.306855][T20919] charge_memcg+0x90/0x3b0 [ 3309.306889][T20919] __mem_cgroup_charge+0x2b/0x90 [ 3309.306924][T20919] do_wp_page+0x8eb/0x3520 [ 3309.306971][T20919] ? lock_release+0x670/0x670 [ 3309.307004][T20919] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3309.307044][T20919] ? do_raw_spin_lock+0x124/0x2b0 [ 3309.307082][T20919] ? spin_bug+0x1c0/0x1c0 [ 3309.307114][T20919] ? lock_downgrade+0x690/0x690 [ 3309.307157][T20919] __handle_mm_fault+0x19a1/0x3e60 [ 3309.307212][T20919] ? vm_iomap_memory+0x190/0x190 [ 3309.307280][T20919] handle_mm_fault+0x2ba/0x9c0 [ 3309.323288][T20913] lowmem_reserve[]: [ 3309.362882][T20919] do_user_addr_fault+0x475/0x1230 [ 3309.362941][T20919] ? rcu_is_watching+0x12/0xb0 [ 3309.362984][T20919] exc_page_fault+0x98/0x170 [ 3309.363024][T20919] asm_exc_page_fault+0x26/0x30 [ 3309.363065][T20919] RIP: 0033:0x7f9ac6239610 [ 3309.363090][T20919] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3309.363121][T20919] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3309.363149][T20919] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3309.363170][T20919] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3309.363190][T20919] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3309.363218][T20919] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3309.363239][T20919] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3309.363260][T20919] ? __sys_socket+0x7c/0x250 [ 3309.363321][T20919] [ 3309.375814][T20913] 0 [ 3309.390043][T20919] memory: usage 307200kB, limit 307200kB, failcnt 69679 [ 3309.414456][T20913] 2617 [ 3309.442829][T20919] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3309.523666][T20913] 2619 [ 3309.542969][T20919] Memory cgroup stats for [ 3309.692871][T20913] 2619 [ 3309.708979][T20919] /syz2: [ 3309.709282][T20919] anon 102400 [ 3309.709282][T20919] file 360448 [ 3309.709282][T20919] kernel 314109952 [ 3309.709282][T20919] kernel_stack 65536 [ 3309.709282][T20919] pagetables 69632 [ 3309.709282][T20919] sec_pagetables 0 [ 3309.709282][T20919] percpu 5428768 [ 3309.709282][T20919] sock 0 [ 3309.709282][T20919] vmalloc 0 [ 3309.709282][T20919] shmem 348160 08:18:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3c510300) [ 3309.709282][T20919] zswap 0 [ 3309.709282][T20919] zswapped 0 [ 3309.709282][T20919] file_mapped 311296 [ 3309.709282][T20919] file_dirty 12288 [ 3309.709282][T20919] file_writeback 0 [ 3309.709282][T20919] swapcached 0 [ 3309.709282][T20919] anon_thp 0 [ 3309.709282][T20919] file_thp 0 [ 3309.709282][T20919] shmem_thp 0 [ 3309.709282][T20919] inactive_anon 45056 [ 3309.709282][T20919] active_anon 405504 [ 3309.709282][T20919] inactive_file 8192 [ 3309.709282][T20919] active_file 4096 [ 3309.709282][T20919] unevictable 0 [ 3309.709282][T20919] slab_reclaimable 217912 08:18:36 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf3580300) [ 3309.709282][T20919] slab_unreclaimable 308298080 [ 3309.709282][T20919] slab 308515992 [ 3309.709282][T20919] workingset_refault_anon 0 [ 3309.709282][T20919] workingset_refault_file 0 [ 3309.709282][T20919] workingset_activate_anon 0 [ 3309.709282][T20919] workingset_activate_file 0 [ 3309.709282][T20919] workingset_restore_anon 0 [ 3309.709282][T20919] workingset_restore_file 0 [ 3309.709282][T20919] workingset_nodereclaim 0 [ 3309.709282][T20919] pgscan 54144 [ 3309.709282][T20919] pgsteal 455 [ 3309.709282][T20919] pgscan_kswapd 0 [ 3309.709282][T20919] pgscan_direct 54144 [ 3309.709282][T20919] pgscan_khugepaged 0 [ 3309.709282][T20919] pgsteal_kswapd 0 [ 3309.709282][T20919] pgsteal_direct 455 [ 3309.709282][T20919] pgsteal_khugepaged 0 [ 3309.709282][T20919] pgfault 420973 [ 3309.709282][T20919] pgmajfault 1 [ 3309.709282][T20919] pgrefill 179472 [ 3309.709282][T20919] pgactivate 53650 [ 3309.709282][T20919] pgdeactivate 0 [ 3309.709282][T20919] pglazyfree 0 [ 3309.709282][T20919] pglazyfreed 0 [ 3309.709282][T20919] zswpin 0 [ 3309.709282][T20919] zswpout 0 [ 3309.709376][T20919] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20919,uid=0 [ 3309.709566][T20919] Memory cgroup out of memory: Killed process 20919 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3309.734978][T20913] 2619 [ 3309.904786][T20928] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3309.946356][T20913] [ 3309.976051][T20928] CPU: 1 PID: 20928 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3309.986558][T20928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3309.994666][T20913] Node 0 [ 3309.996982][T20928] Call Trace: [ 3309.996996][T20928] [ 3309.997010][T20928] dump_stack_lvl+0x136/0x150 [ 3309.997049][T20928] dump_header+0x10a/0xd70 [ 3309.997093][T20928] oom_kill_process+0x25d/0x600 [ 3309.997131][T20928] out_of_memory+0x35c/0x1660 [ 3309.997174][T20928] ? find_held_lock+0x2d/0x110 [ 3309.997225][T20928] ? oom_killer_disable+0x2b0/0x2b0 [ 3309.997265][T20928] ? rcu_read_unlock+0x9/0x60 [ 3310.004231][T20913] DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:329060kB inactive_anon:4068kB active_file:0kB inactive_file:55972kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:37876kB local_pcp:17976kB free_cma:0kB [ 3310.006482][T20928] ? find_held_lock+0x2d/0x110 [ 3310.006549][T20928] mem_cgroup_out_of_memory+0x206/0x270 [ 3310.006599][T20928] ? mem_cgroup_margin+0x130/0x130 [ 3310.006640][T20928] ? lock_downgrade+0x690/0x690 [ 3310.006692][T20928] try_charge_memcg+0xf9b/0x13b0 [ 3310.006731][T20928] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3310.006763][T20928] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3310.015615][T20913] lowmem_reserve[]: [ 3310.015904][T20928] ? lock_downgrade+0x690/0x690 [ 3310.025212][T20913] 0 [ 3310.025468][T20928] ? lock_downgrade+0x690/0x690 [ 3310.036112][T20913] 0 [ 3310.040246][T20928] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3310.040293][T20928] __alloc_pages+0x1f3/0x4a0 [ 3310.040329][T20928] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3310.040371][T20928] ? __lock_acquire+0xbc5/0x5d40 [ 3310.040423][T20928] alloc_pages+0x1aa/0x270 [ 3310.040478][T20928] get_zeroed_page+0x14/0x40 [ 3310.040529][T20928] __pud_alloc+0x3b/0x180 [ 3310.040567][T20928] __handle_mm_fault+0x82d/0x3e60 [ 3310.040616][T20928] ? vm_iomap_memory+0x190/0x190 [ 3310.040692][T20928] handle_mm_fault+0x2ba/0x9c0 [ 3310.040740][T20928] do_user_addr_fault+0x475/0x1230 [ 3310.040789][T20928] ? rcu_is_watching+0x12/0xb0 [ 3310.040835][T20928] exc_page_fault+0x98/0x170 [ 3310.040875][T20928] asm_exc_page_fault+0x26/0x30 [ 3310.040915][T20928] RIP: 0033:0x7f9ac6227766 [ 3310.040942][T20928] Code: ff ff 66 90 48 8b 0d 89 df ca 00 4c 63 05 72 df ca 00 48 8b 05 73 df ca 00 49 01 c8 48 39 c8 72 13 4c 39 c0 73 0e 48 8d 50 04 <89> 38 48 89 15 59 df ca 00 c3 52 48 8d 35 e2 f1 0b 00 48 89 c2 48 [ 3310.040972][T20928] RSP: 002b:00007ffc61d0e9f8 EFLAGS: 00010287 [ 3310.040998][T20928] RAX: 0000001b2d120000 RBX: 0000000000000003 RCX: 0000001b2d120000 [ 3310.041018][T20928] RDX: 0000001b2d120004 RSI: 00000000003c0000 RDI: 0000000000000000 [ 3310.041037][T20928] RBP: 0000000000000000 R08: 0000001b2d520000 R09: 0000000000040000 [ 3310.041057][T20928] R10: 0000000000000011 R11: 0000000000000000 R12: 0000000000000001 [ 3310.041078][T20928] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc61d0eca0 [ 3310.041120][T20928] [ 3310.052678][T20928] memory: usage 307168kB, limit 307200kB, failcnt 69731 [ 3310.078384][T20913] 1 [ 3310.092328][T20928] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3310.106364][T20913] 1 [ 3310.131088][T20928] Memory cgroup stats for [ 3310.134846][T20913] 1 [ 3310.134873][T20913] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3310.149393][T20928] /syz2 [ 3310.154096][T20913] lowmem_reserve[]: [ 3310.158886][T20928] : [ 3310.168831][T20913] 0 [ 3310.171961][T20928] anon 73728 [ 3310.171961][T20928] file 364544 [ 3310.171961][T20928] kernel 314048512 [ 3310.171961][T20928] kernel_stack 32768 [ 3310.171961][T20928] pagetables 57344 [ 3310.171961][T20928] sec_pagetables 0 [ 3310.171961][T20928] percpu 5428768 [ 3310.171961][T20928] sock 0 [ 3310.171961][T20928] vmalloc 0 [ 3310.171961][T20928] shmem 348160 [ 3310.171961][T20928] zswap 0 [ 3310.171961][T20928] zswapped 0 [ 3310.171961][T20928] file_mapped 311296 [ 3310.171961][T20928] file_dirty 12288 [ 3310.171961][T20928] file_writeback 0 [ 3310.171961][T20928] swapcached 0 [ 3310.171961][T20928] anon_thp 0 [ 3310.171961][T20928] file_thp 0 [ 3310.171961][T20928] shmem_thp 0 [ 3310.171961][T20928] inactive_anon 389120 [ 3310.171961][T20928] active_anon 32768 [ 3310.171961][T20928] inactive_file 8192 [ 3310.171961][T20928] active_file 8192 [ 3310.171961][T20928] unevictable 0 [ 3310.171961][T20928] slab_reclaimable 216224 [ 3310.171961][T20928] slab_unreclaimable 308288608 [ 3310.171961][T20928] slab 308504832 [ 3310.171961][T20928] workingset_refault_anon 0 [ 3310.171961][T20928] workingset_refault_file 0 [ 3310.171961][T20928] workingset_activate_anon 0 [ 3310.171961][T20928] workingset_activate_file 0 [ 3310.171961][T20928] workingset_restore_anon 0 [ 3310.171961][T20928] workingset_restore_file 0 [ 3310.171961][T20928] workingset_nodereclaim 0 [ 3310.171961][T20928] pgscan 54160 [ 3310.171961][T20928] pgsteal 455 [ 3310.171961][T20928] pgscan_kswapd 0 [ 3310.171961][T20928] pgscan_direct 54160 [ 3310.171961][T20928] pgscan_khugepaged 0 [ 3310.171961][T20928] pgsteal_kswapd 0 [ 3310.171961][T20928] pgsteal_direct 455 [ 3310.171961][T20928] pgsteal_khugepaged 0 [ 3310.171961][T20928] pgfault 421006 [ 3310.171961][T20928] pgmajfault 1 [ 3310.171961][T20928] pgrefill 179565 [ 3310.171961][T20928] pgactivate 53666 [ 3310.171961][T20928] pgdeactivate 0 [ 3310.171961][T20928] pglazyfree 0 [ 3310.171961][T20928] pglazyfreed 0 [ 3310.171961][T20928] zswpin 0 [ 3310.171961][T20928] zswpout 0 [ 3310.180971][T20913] 0 [ 3310.182208][T20928] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3310.194461][T20913] 0 [ 3310.200325][T20928] ,cpuset= [ 3310.204153][T20913] 0 [ 3310.207024][T20928] syz2 [ 3310.254010][T20913] 0 [ 3310.272942][T20928] ,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20928,uid=0 [ 3310.273094][T20928] Memory cgroup out of memory: Killed process 20928 (syz-executor.2) total-vm:54416kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:56kB oom_score_adj:1000 [ 3310.340161][T20923] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3310.349721][T20913] [ 3310.572267][T20923] CPU: 1 PID: 20923 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3310.599948][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3310.610059][T20923] Call Trace: [ 3310.613381][T20923] [ 3310.616359][T20923] dump_stack_lvl+0x136/0x150 [ 3310.621103][T20923] dump_header+0x10a/0xd70 [ 3310.624609][T20913] Node 1 [ 3310.625566][T20923] oom_kill_process+0x25d/0x600 [ 3310.625616][T20923] out_of_memory+0x35c/0x1660 [ 3310.628805][T20913] Normal free:1752892kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:356kB inactive_anon:528kB active_file:36kB inactive_file:4828kB unevictable:1536kB writepending:68kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22152kB local_pcp:18700kB free_cma:0kB [ 3310.633411][T20923] ? oom_killer_disable+0x2b0/0x2b0 [ 3310.633458][T20923] ? rcu_read_unlock+0x9/0x60 [ 3310.638477][T20913] lowmem_reserve[]: [ 3310.667726][T20923] ? find_held_lock+0x2d/0x110 [ 3310.667790][T20923] mem_cgroup_out_of_memory+0x206/0x270 [ 3310.667839][T20923] ? mem_cgroup_margin+0x130/0x130 [ 3310.667880][T20923] ? lock_downgrade+0x690/0x690 [ 3310.667934][T20923] try_charge_memcg+0xf9b/0x13b0 [ 3310.667972][T20923] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3310.668003][T20923] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3310.668049][T20923] ? lock_downgrade+0x690/0x690 [ 3310.668086][T20923] ? lock_downgrade+0x690/0x690 [ 3310.668137][T20923] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3310.668173][T20923] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3310.668219][T20923] copy_process+0x4e3/0x7590 [ 3310.668262][T20923] ? __lock_acquire+0xbc5/0x5d40 [ 3310.668312][T20923] ? __cleanup_sighand+0xb0/0xb0 [ 3310.668349][T20923] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3310.668388][T20923] ? psi_memstall_leave+0x174/0x250 [ 3310.668431][T20923] ? lock_downgrade+0x690/0x690 [ 3310.668474][T20923] kernel_clone+0xeb/0x890 [ 3310.668514][T20923] ? create_io_thread+0xf0/0xf0 [ 3310.668556][T20923] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3310.668604][T20923] ? lock_downgrade+0x690/0x690 [ 3310.668662][T20923] __do_sys_clone+0xba/0x100 [ 3310.668701][T20923] ? kernel_clone+0x890/0x890 [ 3310.668758][T20923] ? syscall_enter_from_user_mode+0x26/0x80 [ 3310.668805][T20923] do_syscall_64+0x39/0xb0 [ 3310.668853][T20923] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3310.680039][T20913] 0 [ 3310.682576][T20923] RIP: 0033:0x7f461ea8d591 [ 3310.682609][T20923] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3310.689333][T20913] 0 [ 3310.692949][T20923] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3310.692986][T20923] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3310.693008][T20923] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3310.699060][T20913] 0 [ 3310.702953][T20923] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3310.702979][T20923] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3310.703002][T20923] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3310.703047][T20923] [ 3310.709162][T20913] 0 [ 3310.776440][T20923] memory: usage 307184kB, limit 307200kB, failcnt 80297 [ 3310.783182][T20913] 0 [ 3310.784327][T20923] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3310.791317][T20913] [ 3310.802759][T20923] Memory cgroup stats for [ 3310.806072][T20913] Node 0 [ 3310.810933][T20923] /syz3 [ 3310.820826][T20913] DMA: [ 3310.830205][T20923] : [ 3310.848737][T20913] 2*4kB [ 3310.868603][T20923] anon 86016 [ 3310.868603][T20923] file 360448 [ 3310.868603][T20923] kernel 314109952 [ 3310.868603][T20923] kernel_stack 32768 [ 3310.868603][T20923] pagetables 69632 [ 3310.868603][T20923] sec_pagetables 0 [ 3310.868603][T20923] percpu 5432256 [ 3310.868603][T20923] sock 0 [ 3310.868603][T20923] vmalloc 8192 [ 3310.868603][T20923] shmem 339968 [ 3310.868603][T20923] zswap 0 [ 3310.868603][T20923] zswapped 0 [ 3310.868603][T20923] file_mapped 327680 [ 3310.868603][T20923] file_dirty 16384 [ 3310.868603][T20923] file_writeback 0 [ 3310.868603][T20923] swapcached 0 [ 3310.868603][T20923] anon_thp 0 [ 3310.868603][T20923] file_thp 0 [ 3310.868603][T20923] shmem_thp 0 [ 3310.868603][T20923] inactive_anon 28672 [ 3310.868603][T20923] active_anon 397312 [ 3310.868603][T20923] inactive_file 0 [ 3310.868603][T20923] active_file 20480 [ 3310.868603][T20923] unevictable 0 [ 3310.868603][T20923] slab_reclaimable 36944 [ 3310.868603][T20923] slab_unreclaimable 308482240 [ 3310.868603][T20923] slab 308519184 [ 3310.868603][T20923] workingset_refault_anon 0 [ 3310.868603][T20923] workingset_refault_file 2 [ 3310.868603][T20923] workingset_activate_anon 0 [ 3310.868603][T20923] workingset_activate_file 0 [ 3310.868603][T20923] workingset_restore_anon 0 [ 3310.868603][T20923] workingset_restore_file 0 [ 3310.868603][T20923] workingset_nodereclaim 0 [ 3310.868603][T20923] pgscan 54750 [ 3310.868603][T20923] pgsteal 449 [ 3310.868603][T20923] pgscan_kswapd 0 [ 3310.868603][T20923] pgscan_direct 54750 [ 3310.868603][T20923] pgscan_khugepaged 0 [ 3310.868603][T20923] pgsteal_kswapd 0 [ 3310.868603][T20923] pgsteal_direct 449 [ 3310.868603][T20923] pgsteal_khugepaged 0 [ 3310.868603][T20923] pgfault 415476 [ 3310.868603][T20923] pgmajfault 1 [ 3310.868603][T20923] pgrefill 200262 [ 3310.868603][T20923] pgactivate 54292 [ 3310.868603][T20923] pgdeactivate 0 [ 3310.868603][T20923] pglazyfree 0 [ 3310.868603][T20923] pglazyfreed 0 [ 3310.868603][T20923] zswpin 0 [ 3310.868603][T20923] zswpout 0 [ 3310.868693][T20923] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 3310.904296][T20913] (UM) [ 3310.914696][T20923] ,oom_memcg= [ 3310.927467][T20913] 3*8kB [ 3310.929844][T20923] /syz3 [ 3310.941767][T20913] (UM) [ 3310.942606][T20923] ,task_memcg= [ 3310.949131][T20913] 2*16kB [ 3311.130623][T20923] /syz3,task=syz-executor.3,pid=20923,uid=0 [ 3311.130727][T20923] Memory cgroup out of memory: Killed process 20923 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3311.140589][T20925] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3311.140641][T20925] CPU: 1 PID: 20925 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3311.140673][T20925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3311.140691][T20925] Call Trace: [ 3311.140701][T20925] [ 3311.140713][T20925] dump_stack_lvl+0x136/0x150 [ 3311.140753][T20925] dump_header+0x10a/0xd70 [ 3311.140798][T20925] oom_kill_process+0x25d/0x600 [ 3311.140842][T20925] out_of_memory+0x35c/0x1660 [ 3311.140892][T20925] ? oom_killer_disable+0x2b0/0x2b0 [ 3311.140941][T20925] ? rcu_read_unlock+0x9/0x60 [ 3311.145334][T20913] (UM) [ 3311.147033][T20925] ? find_held_lock+0x2d/0x110 [ 3311.147096][T20925] mem_cgroup_out_of_memory+0x206/0x270 [ 3311.147144][T20925] ? mem_cgroup_margin+0x130/0x130 [ 3311.147188][T20925] ? lock_downgrade+0x690/0x690 [ 3311.150038][T20913] 7*32kB [ 3311.152818][T20925] try_charge_memcg+0xf9b/0x13b0 [ 3311.155558][T20913] (UM) 1*64kB [ 3311.158938][T20925] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3311.158981][T20925] ? rcu_read_unlock+0x9/0x60 [ 3311.159019][T20925] ? lock_downgrade+0x690/0x690 [ 3311.159073][T20925] charge_memcg+0x90/0x3b0 [ 3311.162071][T20913] (E) 3*128kB [ 3311.167960][T20925] __mem_cgroup_charge+0x2b/0x90 [ 3311.167995][T20925] ? copy_mc_to_kernel+0x3e/0x90 [ 3311.168045][T20925] do_wp_page+0x8eb/0x3520 [ 3311.168087][T20925] ? lock_release+0x670/0x670 [ 3311.168119][T20925] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3311.168160][T20925] ? do_raw_spin_lock+0x124/0x2b0 [ 3311.168200][T20925] ? spin_bug+0x1c0/0x1c0 [ 3311.168231][T20925] ? lock_downgrade+0x690/0x690 [ 3311.168275][T20925] __handle_mm_fault+0x19a1/0x3e60 [ 3311.168326][T20925] ? vm_iomap_memory+0x190/0x190 [ 3311.168397][T20925] handle_mm_fault+0x2ba/0x9c0 [ 3311.168443][T20925] do_user_addr_fault+0x475/0x1230 [ 3311.168491][T20925] ? rcu_is_watching+0x12/0xb0 [ 3311.168534][T20925] exc_page_fault+0x98/0x170 [ 3311.168574][T20925] asm_exc_page_fault+0x26/0x30 [ 3311.168623][T20925] RIP: 0033:0x7f0e44a36f7e [ 3311.168652][T20925] Code: 10 4c 89 35 14 50 17 00 89 78 28 8b 7c 24 18 89 78 2c 8b 7c 24 54 89 78 78 48 8b 3c 24 88 4c 3a 04 8b 7c 24 4c 48 8b 54 24 40 <89> b8 80 00 00 00 0f 1f 40 00 48 8b 8c 14 50 01 00 00 48 83 c2 08 [ 3311.168682][T20925] RSP: 002b:00007ffc44a97950 EFLAGS: 00010246 [ 3311.168708][T20925] RAX: 00007f0e44babf80 RBX: 00007f0e44babf8c RCX: 0000000000000000 [ 3311.168728][T20925] RDX: 0000000000000000 RSI: 00007f0e44babf88 RDI: 0000000000000000 [ 3311.168749][T20925] RBP: 00007f0e44babf80 R08: 00007f0e458bd700 R09: 00007f0e458bd700 [ 3311.168771][T20925] R10: 00007f0e458bd9d0 R11: 0000000000000206 R12: 00007f0e44babf8c [ 3311.168793][T20925] R13: 00007f0e44600060 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3311.168837][T20925] [ 3311.321266][T20925] memory: usage 307188kB, limit 307200kB, failcnt 72664 [ 3311.324944][T20913] (UME) [ 3311.336975][T20925] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3311.338094][T20913] 3*256kB [ 3311.355154][T20925] Memory cgroup stats for [ 3311.357584][T20913] (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3311.357699][T20913] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) [ 3311.373762][T20925] /syz5 [ 3311.380002][T20913] 24*128kB [ 3311.388478][T20925] : [ 3311.392797][T20913] (UME) [ 3311.419370][T20925] anon 86016 [ 3311.419370][T20925] file 360448 [ 3311.419370][T20925] kernel 314109952 [ 3311.419370][T20925] kernel_stack 65536 [ 3311.419370][T20925] pagetables 73728 [ 3311.419370][T20925] sec_pagetables 0 [ 3311.419370][T20925] percpu 5432688 [ 3311.419370][T20925] sock 0 [ 3311.419370][T20925] vmalloc 20480 [ 3311.419370][T20925] shmem 344064 [ 3311.419370][T20925] zswap 0 [ 3311.419370][T20925] zswapped 0 [ 3311.419370][T20925] file_mapped 327680 [ 3311.419370][T20925] file_dirty 12288 [ 3311.419370][T20925] file_writeback 0 [ 3311.419370][T20925] swapcached 0 [ 3311.419370][T20925] anon_thp 0 [ 3311.419370][T20925] file_thp 0 [ 3311.419370][T20925] shmem_thp 0 [ 3311.419370][T20925] inactive_anon 45056 [ 3311.419370][T20925] active_anon 385024 [ 3311.419370][T20925] inactive_file 0 [ 3311.419370][T20925] active_file 16384 [ 3311.419370][T20925] unevictable 0 [ 3311.419370][T20925] slab_reclaimable 12952 [ 3311.419370][T20925] slab_unreclaimable 308475704 [ 3311.419370][T20925] slab 308488656 [ 3311.419370][T20925] workingset_refault_anon 0 [ 3311.419370][T20925] workingset_refault_file 1 [ 3311.419370][T20925] workingset_activate_anon 0 [ 3311.419370][T20925] workingset_activate_file 0 [ 3311.419370][T20925] workingset_restore_anon 0 [ 3311.419370][T20925] workingset_restore_file 0 [ 3311.419370][T20925] workingset_nodereclaim 0 [ 3311.419370][T20925] pgscan 42235 [ 3311.419370][T20925] pgsteal 445 [ 3311.419370][T20925] pgscan_kswapd 0 [ 3311.419370][T20925] pgscan_direct 42235 [ 3311.419370][T20925] pgscan_khugepaged 0 [ 3311.419370][T20925] pgsteal_kswapd 0 [ 3311.419370][T20925] pgsteal_direct 445 [ 3311.419370][T20925] pgsteal_khugepaged 0 [ 3311.419370][T20925] pgfault 411430 [ 3311.419370][T20925] pgmajfault 0 [ 3311.419370][T20925] pgrefill 138576 [ 3311.419370][T20925] pgactivate 41775 [ 3311.419370][T20925] pgdeactivate 0 [ 3311.419370][T20925] pglazyfree 0 [ 3311.419370][T20925] pglazyfreed 0 [ 3311.419370][T20925] zswpin 0 [ 3311.419370][T20925] zswpout 0 [ 3311.436016][T20913] 14*256kB [ 3311.464475][T20925] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3311.475501][T20913] (UME) [ 3311.494030][T20925] ,cpuset= [ 3311.500140][T20913] 6*512kB [ 3311.507229][T20925] syz5 [ 3311.510168][T20913] (UM) [ 3311.513245][T20925] ,mems_allowed=0-1 [ 3311.515441][T20913] 10*1024kB (UM) 6*2048kB (M) [ 3311.526183][T20925] ,oom_memcg= [ 3311.711751][T20913] 0*4096kB [ 3311.738012][T20925] /syz5 [ 3311.740839][T20913] = 44180kB [ 3311.745459][T20925] ,task_memcg= [ 3311.747981][T20913] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3311.756875][T20925] /syz5,task=syz-executor.5,pid=20925,uid=0 [ 3311.771276][T20913] Node 1 Normal: 1*4kB (E) 195*8kB (UM) 360*16kB (UME) 95*32kB (ME) 180*64kB (UME) 112*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1752444kB [ 3311.782950][T20925] Memory cgroup out of memory: Killed process 20925 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3311.809240][T20913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.826464][T20913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3311.839788][T20913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3311.857747][T20913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3311.874733][T20913] 17698 total pagecache pages 08:18:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r6, 0x0, 0x3) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0xfd74) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000380)={0x9, 0x49e, 0x800, 0xfa, 0x3, 0x59, 0x4c64}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x14c, 0x10, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x10140, 0x10000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x66}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_LINK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_CARRIER={0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_VFINFO_LIST={0x9c, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1889, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x8}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xfb8, 0xfffff001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x124c000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000073f7c4cdf6efb1e721a87373a5b0400f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) 08:18:38 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc453030000000000) 08:18:38 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3d510300) 08:18:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcf4b0300) 08:18:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf4000000) [ 3311.882088][T20913] 0 pages in swap cache [ 3311.886387][T20913] Free swap = 0kB [ 3311.890488][T20913] Total swap = 0kB [ 3311.894375][T20913] 2097051 pages RAM [ 3311.898405][T20913] 0 pages HighMem/MovableOnly [ 3311.903493][T20913] 392115 pages reserved [ 3311.908836][T20913] 0 pages cma reserved [ 3312.116335][T20933] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3312.145197][T20933] CPU: 1 PID: 20933 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3312.155703][T20933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3312.165898][T20933] Call Trace: [ 3312.169248][T20933] [ 3312.172235][T20933] dump_stack_lvl+0x136/0x150 [ 3312.176978][T20933] dump_header+0x10a/0xd70 [ 3312.181464][T20933] oom_kill_process+0x25d/0x600 [ 3312.186365][T20933] out_of_memory+0x35c/0x1660 [ 3312.191125][T20933] ? find_held_lock+0x2d/0x110 [ 3312.195942][T20933] ? oom_killer_disable+0x2b0/0x2b0 [ 3312.201190][T20933] ? rcu_read_unlock+0x9/0x60 [ 3312.205936][T20933] ? find_held_lock+0x2d/0x110 [ 3312.210753][T20933] mem_cgroup_out_of_memory+0x206/0x270 [ 3312.216346][T20933] ? mem_cgroup_margin+0x130/0x130 [ 3312.221585][T20933] ? lock_downgrade+0x690/0x690 [ 3312.226493][T20933] try_charge_memcg+0xf9b/0x13b0 [ 3312.231473][T20933] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3312.237491][T20933] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3312.243258][T20933] ? lock_downgrade+0x690/0x690 [ 3312.248145][T20933] ? lock_downgrade+0x690/0x690 [ 3312.253043][T20933] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3312.259942][T20933] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3312.266139][T20933] copy_process+0x4e3/0x7590 [ 3312.270770][T20933] ? __lock_acquire+0xbc5/0x5d40 [ 3312.275755][T20933] ? __cleanup_sighand+0xb0/0xb0 [ 3312.280728][T20933] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3312.286743][T20933] ? psi_memstall_leave+0x174/0x250 [ 3312.291985][T20933] ? lock_downgrade+0x690/0x690 [ 3312.296876][T20933] kernel_clone+0xeb/0x890 [ 3312.301341][T20933] ? create_io_thread+0xf0/0xf0 [ 3312.306232][T20933] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3312.312518][T20933] ? lock_downgrade+0x690/0x690 [ 3312.317411][T20933] __do_sys_clone+0xba/0x100 [ 3312.322040][T20933] ? kernel_clone+0x890/0x890 [ 3312.326770][T20933] ? syscall_enter_from_user_mode+0x26/0x80 [ 3312.332719][T20933] do_syscall_64+0x39/0xb0 [ 3312.337219][T20933] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.343152][T20933] RIP: 0033:0x7f461ea8d591 [ 3312.347603][T20933] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3312.367245][T20933] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3312.375693][T20933] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3312.383701][T20933] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3312.391710][T20933] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3312.399796][T20933] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3312.408053][T20933] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3312.416075][T20933] [ 3312.422530][T20933] memory: usage 307200kB, limit 307200kB, failcnt 80407 [ 3312.429895][T20933] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3312.437259][T20933] Memory cgroup stats for /syz3: [ 3312.437544][T20933] anon 86016 [ 3312.437544][T20933] file 360448 [ 3312.437544][T20933] kernel 314126336 [ 3312.437544][T20933] kernel_stack 32768 [ 3312.437544][T20933] pagetables 69632 [ 3312.437544][T20933] sec_pagetables 0 [ 3312.437544][T20933] percpu 5432320 [ 3312.437544][T20933] sock 0 [ 3312.437544][T20933] vmalloc 8192 [ 3312.437544][T20933] shmem 339968 [ 3312.437544][T20933] zswap 0 [ 3312.437544][T20933] zswapped 0 [ 3312.437544][T20933] file_mapped 327680 [ 3312.437544][T20933] file_dirty 20480 [ 3312.437544][T20933] file_writeback 0 [ 3312.437544][T20933] swapcached 0 [ 3312.437544][T20933] anon_thp 0 [ 3312.437544][T20933] file_thp 0 [ 3312.437544][T20933] shmem_thp 0 [ 3312.437544][T20933] inactive_anon 405504 [ 3312.437544][T20933] active_anon 20480 [ 3312.437544][T20933] inactive_file 0 [ 3312.437544][T20933] active_file 20480 [ 3312.437544][T20933] unevictable 0 [ 3312.437544][T20933] slab_reclaimable 36944 [ 3312.437544][T20933] slab_unreclaimable 308494152 [ 3312.437544][T20933] slab 308531096 [ 3312.437544][T20933] workingset_refault_anon 0 [ 3312.437544][T20933] workingset_refault_file 2 [ 3312.437544][T20933] workingset_activate_anon 0 [ 3312.437544][T20933] workingset_activate_file 0 [ 3312.437544][T20933] workingset_restore_anon 0 [ 3312.437544][T20933] workingset_restore_file 0 [ 3312.437544][T20933] workingset_nodereclaim 0 [ 3312.437544][T20933] pgscan 54785 [ 3312.437544][T20933] pgsteal 449 [ 3312.437544][T20933] pgscan_kswapd 0 [ 3312.437544][T20933] pgscan_direct 54785 [ 3312.437544][T20933] pgscan_khugepaged 0 [ 3312.437544][T20933] pgsteal_kswapd 0 [ 3312.437544][T20933] pgsteal_direct 449 [ 3312.437544][T20933] pgsteal_khugepaged 0 [ 3312.437544][T20933] pgfault 415516 [ 3312.437544][T20933] pgmajfault 1 [ 3312.437544][T20933] pgrefill 200830 [ 3312.437544][T20933] pgactivate 54327 [ 3312.437544][T20933] pgdeactivate 0 [ 3312.437544][T20933] pglazyfree 0 [ 3312.437544][T20933] pglazyfreed 0 [ 3312.437544][T20933] zswpin 0 [ 3312.437544][T20933] zswpout 0 [ 3312.628547][T20933] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20933,uid=0 [ 3312.644887][T20933] Memory cgroup out of memory: Killed process 20933 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3312.666902][T20934] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3312.682087][T20934] CPU: 0 PID: 20934 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3312.692589][T20934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3312.702697][T20934] Call Trace: [ 3312.706125][T20934] [ 3312.709096][T20934] dump_stack_lvl+0x136/0x150 [ 3312.713845][T20934] dump_header+0x10a/0xd70 [ 3312.718337][T20934] oom_kill_process+0x25d/0x600 [ 3312.723264][T20934] out_of_memory+0x35c/0x1660 [ 3312.728117][T20934] ? oom_killer_disable+0x2b0/0x2b0 [ 3312.733387][T20934] ? rcu_read_unlock+0x9/0x60 [ 3312.738140][T20934] ? find_held_lock+0x2d/0x110 [ 3312.742985][T20934] mem_cgroup_out_of_memory+0x206/0x270 [ 3312.748607][T20934] ? mem_cgroup_margin+0x130/0x130 [ 3312.753824][T20934] ? lock_downgrade+0x690/0x690 [ 3312.758854][T20934] try_charge_memcg+0xf9b/0x13b0 08:18:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfcffffff00000000) 08:18:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf4580300) 08:18:39 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r6, 0x0, 0x3) (async) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0xfd74) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000380)={0x9, 0x49e, 0x800, 0xfa, 0x3, 0x59, 0x4c64}, 0xc) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x14c, 0x10, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x10140, 0x10000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x66}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_LINK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_CARRIER={0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_VFINFO_LIST={0x9c, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1889, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x8}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xfb8, 0xfffff001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x124c000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000073f7c4cdf6efb1e721a87373a5b0400f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) [ 3312.763859][T20934] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3312.769899][T20934] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3312.775784][T20934] ? lock_downgrade+0x690/0x690 [ 3312.780791][T20934] ? lock_downgrade+0x690/0x690 [ 3312.785723][T20934] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3312.791332][T20934] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3312.797719][T20934] copy_process+0x13a7/0x7590 [ 3312.802437][T20934] ? __lock_acquire+0xbc5/0x5d40 [ 3312.807432][T20934] ? __cleanup_sighand+0xb0/0xb0 [ 3312.812413][T20934] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3312.818453][T20934] ? psi_memstall_leave+0x174/0x250 [ 3312.823707][T20934] ? lock_downgrade+0x690/0x690 [ 3312.828602][T20934] kernel_clone+0xeb/0x890 [ 3312.833170][T20934] ? create_io_thread+0xf0/0xf0 [ 3312.838156][T20934] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3312.844443][T20934] ? lock_downgrade+0x690/0x690 [ 3312.849337][T20934] __do_sys_clone+0xba/0x100 [ 3312.853975][T20934] ? kernel_clone+0x890/0x890 [ 3312.858700][T20934] ? syscall_enter_from_user_mode+0x26/0x80 [ 3312.864638][T20934] do_syscall_64+0x39/0xb0 [ 3312.869154][T20934] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3312.875085][T20934] RIP: 0033:0x7f0e44a8d591 [ 3312.879530][T20934] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3312.899258][T20934] RSP: 002b:00007ffc44a97818 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3312.907702][T20934] RAX: ffffffffffffffda RBX: 00007f0e458bd700 RCX: 00007f0e44a8d591 [ 3312.915710][T20934] RDX: 00007f0e458bd9d0 RSI: 00007f0e458bd2f0 RDI: 00000000003d0f00 [ 3312.923708][T20934] RBP: 00007ffc44a97a60 R08: 00007f0e458bd700 R09: 00007f0e458bd700 [ 3312.931707][T20934] R10: 00007f0e458bd9d0 R11: 0000000000000206 R12: 00007ffc44a978ce [ 3312.939714][T20934] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3312.947732][T20934] 08:18:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc553030000000000) 08:18:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf5580300) [ 3313.195641][T20934] memory: usage 307200kB, limit 307200kB, failcnt 72755 [ 3313.205367][T20934] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3313.223265][T20934] Memory cgroup stats for /syz5: [ 3313.223548][T20934] anon 86016 [ 3313.223548][T20934] file 364544 [ 3313.223548][T20934] kernel 314122240 [ 3313.223548][T20934] kernel_stack 32768 [ 3313.223548][T20934] pagetables 73728 [ 3313.223548][T20934] sec_pagetables 0 [ 3313.223548][T20934] percpu 5432752 [ 3313.223548][T20934] sock 0 [ 3313.223548][T20934] vmalloc 20480 [ 3313.223548][T20934] shmem 344064 [ 3313.223548][T20934] zswap 0 [ 3313.223548][T20934] zswapped 0 [ 3313.223548][T20934] file_mapped 327680 [ 3313.223548][T20934] file_dirty 12288 [ 3313.223548][T20934] file_writeback 0 [ 3313.223548][T20934] swapcached 0 [ 3313.223548][T20934] anon_thp 0 [ 3313.223548][T20934] file_thp 0 [ 3313.223548][T20934] shmem_thp 0 [ 3313.223548][T20934] inactive_anon 36864 [ 3313.223548][T20934] active_anon 393216 [ 3313.223548][T20934] inactive_file 0 [ 3313.223548][T20934] active_file 20480 [ 3313.223548][T20934] unevictable 0 [ 3313.223548][T20934] slab_reclaimable 13192 [ 3313.223548][T20934] slab_unreclaimable 308487152 [ 3313.223548][T20934] slab 308500344 [ 3313.223548][T20934] workingset_refault_anon 0 [ 3313.223548][T20934] workingset_refault_file 1 [ 3313.223548][T20934] workingset_activate_anon 0 [ 3313.223548][T20934] workingset_activate_file 0 [ 3313.223548][T20934] workingset_restore_anon 0 [ 3313.223548][T20934] workingset_restore_file 0 [ 3313.223548][T20934] workingset_nodereclaim 0 [ 3313.223548][T20934] pgscan 42331 [ 3313.223548][T20934] pgsteal 445 [ 3313.223548][T20934] pgscan_kswapd 0 [ 3313.223548][T20934] pgscan_direct 42331 [ 3313.223548][T20934] pgscan_khugepaged 0 [ 3313.223548][T20934] pgsteal_kswapd 0 [ 3313.223548][T20934] pgsteal_direct 445 [ 3313.223548][T20934] pgsteal_khugepaged 0 [ 3313.223548][T20934] pgfault 411469 [ 3313.223548][T20934] pgmajfault 0 [ 3313.223548][T20934] pgrefill 138875 [ 3313.223548][T20934] pgactivate 41871 08:18:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfeff000000000000) [ 3313.223548][T20934] pgdeactivate 0 [ 3313.223548][T20934] pglazyfree 0 [ 3313.223548][T20934] pglazyfreed 0 [ 3313.223548][T20934] zswpin 0 [ 3313.223548][T20934] zswpout 0 [ 3313.420344][T20934] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20934,uid=0 08:18:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf6580300) 08:18:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc603000000000000) [ 3313.441566][T20934] Memory cgroup out of memory: Killed process 20934 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:18:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd0000000) [ 3313.535656][T20932] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3313.578245][T20932] CPU: 0 PID: 20932 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3313.588827][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3313.598946][T20932] Call Trace: [ 3313.602272][T20932] [ 3313.605245][T20932] dump_stack_lvl+0x136/0x150 [ 3313.609994][T20932] dump_header+0x10a/0xd70 [ 3313.614483][T20932] oom_kill_process+0x25d/0x600 [ 3313.619404][T20932] out_of_memory+0x35c/0x1660 [ 3313.624171][T20932] ? find_held_lock+0x2d/0x110 [ 3313.629021][T20932] ? oom_killer_disable+0x2b0/0x2b0 [ 3313.634292][T20932] ? rcu_read_unlock+0x9/0x60 [ 3313.639038][T20932] ? find_held_lock+0x2d/0x110 [ 3313.643885][T20932] mem_cgroup_out_of_memory+0x206/0x270 [ 3313.649563][T20932] ? mem_cgroup_margin+0x130/0x130 [ 3313.654759][T20932] ? lock_downgrade+0x690/0x690 [ 3313.659702][T20932] try_charge_memcg+0xf9b/0x13b0 [ 3313.664726][T20932] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3313.670790][T20932] ? rcu_read_unlock+0x9/0x60 [ 3313.675655][T20932] ? lock_downgrade+0x690/0x690 [ 3313.680592][T20932] charge_memcg+0x90/0x3b0 [ 3313.685172][T20932] __mem_cgroup_charge+0x2b/0x90 [ 3313.690279][T20932] do_wp_page+0x8eb/0x3520 [ 3313.694778][T20932] ? lock_release+0x670/0x670 [ 3313.699761][T20932] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3313.705301][T20932] ? do_raw_spin_lock+0x124/0x2b0 [ 3313.710517][T20932] ? spin_bug+0x1c0/0x1c0 [ 3313.714934][T20932] ? lock_downgrade+0x690/0x690 [ 3313.719907][T20932] __handle_mm_fault+0x19a1/0x3e60 [ 3313.725168][T20932] ? vm_iomap_memory+0x190/0x190 [ 3313.730255][T20932] handle_mm_fault+0x2ba/0x9c0 [ 3313.735143][T20932] do_user_addr_fault+0x475/0x1230 [ 3313.740363][T20932] ? rcu_is_watching+0x12/0xb0 [ 3313.745217][T20932] exc_page_fault+0x98/0x170 [ 3313.749894][T20932] asm_exc_page_fault+0x26/0x30 [ 3313.754844][T20932] RIP: 0033:0x7f9ac6239610 [ 3313.759421][T20932] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3313.779187][T20932] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3313.785327][T20932] RAX: 00000000c45a0a22 RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3313.793367][T20932] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000a21e670 [ 3313.801401][T20932] RBP: 00000000c45a0a22 R08: 0000000000000a22 R09: 00000000c45a0a26 [ 3313.809523][T20932] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3313.817560][T20932] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff83cafedf [ 3313.825601][T20932] ? security_socket_create+0x3f/0xc0 [ 3313.831074][T20932] [ 3313.853125][T20932] memory: usage 307200kB, limit 307200kB, failcnt 69848 [ 3313.860399][T20932] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3313.868706][T20932] Memory cgroup stats for /syz2: [ 3313.868978][T20932] anon 114688 [ 3313.868978][T20932] file 364544 [ 3313.868978][T20932] kernel 314093568 [ 3313.868978][T20932] kernel_stack 65536 [ 3313.868978][T20932] pagetables 69632 [ 3313.868978][T20932] sec_pagetables 0 [ 3313.868978][T20932] percpu 5428704 [ 3313.868978][T20932] sock 0 [ 3313.868978][T20932] vmalloc 0 [ 3313.868978][T20932] shmem 348160 [ 3313.868978][T20932] zswap 0 [ 3313.868978][T20932] zswapped 0 [ 3313.868978][T20932] file_mapped 311296 [ 3313.868978][T20932] file_dirty 12288 [ 3313.868978][T20932] file_writeback 0 [ 3313.868978][T20932] swapcached 0 [ 3313.868978][T20932] anon_thp 0 [ 3313.868978][T20932] file_thp 0 [ 3313.868978][T20932] shmem_thp 0 [ 3313.868978][T20932] inactive_anon 53248 [ 3313.868978][T20932] active_anon 409600 [ 3313.868978][T20932] inactive_file 12288 [ 3313.868978][T20932] active_file 4096 [ 3313.868978][T20932] unevictable 0 [ 3313.868978][T20932] slab_reclaimable 218152 [ 3313.868978][T20932] slab_unreclaimable 308286168 [ 3313.868978][T20932] slab 308504320 [ 3313.868978][T20932] workingset_refault_anon 0 [ 3313.868978][T20932] workingset_refault_file 0 [ 3313.868978][T20932] workingset_activate_anon 0 [ 3313.868978][T20932] workingset_activate_file 0 [ 3313.868978][T20932] workingset_restore_anon 0 [ 3313.868978][T20932] workingset_restore_file 0 [ 3313.868978][T20932] workingset_nodereclaim 0 [ 3313.868978][T20932] pgscan 54199 [ 3313.868978][T20932] pgsteal 455 [ 3313.868978][T20932] pgscan_kswapd 0 [ 3313.868978][T20932] pgscan_direct 54199 [ 3313.868978][T20932] pgscan_khugepaged 0 [ 3313.868978][T20932] pgsteal_kswapd 0 [ 3313.868978][T20932] pgsteal_direct 455 [ 3313.868978][T20932] pgsteal_khugepaged 0 [ 3313.868978][T20932] pgfault 421055 [ 3313.868978][T20932] pgmajfault 1 [ 3313.868978][T20932] pgrefill 179801 [ 3313.868978][T20932] pgactivate 53705 [ 3313.868978][T20932] pgdeactivate 0 [ 3313.868978][T20932] pglazyfree 0 [ 3313.868978][T20932] pglazyfreed 0 [ 3313.868978][T20932] zswpin 0 [ 3313.868978][T20932] zswpout 0 [ 3314.067543][T20932] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20932,uid=0 [ 3314.083309][T20932] Memory cgroup out of memory: Killed process 20932 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3314.101029][T20940] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3314.119223][T20940] CPU: 1 PID: 20940 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3314.129716][T20940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3314.139809][T20940] Call Trace: [ 3314.143205][T20940] [ 3314.146160][T20940] dump_stack_lvl+0x136/0x150 [ 3314.150883][T20940] dump_header+0x10a/0xd70 [ 3314.155331][T20940] oom_kill_process+0x25d/0x600 [ 3314.160225][T20940] out_of_memory+0x35c/0x1660 [ 3314.164953][T20940] ? oom_killer_disable+0x2b0/0x2b0 [ 3314.170184][T20940] ? rcu_read_unlock+0x9/0x60 [ 3314.174911][T20940] ? find_held_lock+0x2d/0x110 [ 3314.179724][T20940] mem_cgroup_out_of_memory+0x206/0x270 [ 3314.185323][T20940] ? mem_cgroup_margin+0x130/0x130 [ 3314.190468][T20940] ? lock_downgrade+0x690/0x690 [ 3314.195355][T20940] try_charge_memcg+0xf9b/0x13b0 [ 3314.200420][T20940] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3314.206442][T20940] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3314.212218][T20940] ? lock_downgrade+0x690/0x690 [ 3314.217108][T20940] ? lock_downgrade+0x690/0x690 [ 3314.222027][T20940] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3314.227604][T20940] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3314.233790][T20940] copy_process+0x4e3/0x7590 [ 3314.238428][T20940] ? folio_flags.constprop.0+0x53/0x150 [ 3314.244033][T20940] ? free_swap_cache+0x1b5/0x3d0 [ 3314.249028][T20940] ? do_wp_page+0x4be/0x3520 [ 3314.253662][T20940] ? __cleanup_sighand+0xb0/0xb0 [ 3314.258726][T20940] ? spin_bug+0x1c0/0x1c0 [ 3314.263096][T20940] ? lock_downgrade+0x690/0x690 [ 3314.267995][T20940] kernel_clone+0xeb/0x890 [ 3314.272480][T20940] ? create_io_thread+0xf0/0xf0 [ 3314.277372][T20940] ? vm_iomap_memory+0x190/0x190 [ 3314.282360][T20940] ? find_held_lock+0x2d/0x110 [ 3314.287197][T20940] __do_sys_clone+0xba/0x100 [ 3314.291818][T20940] ? kernel_clone+0x890/0x890 [ 3314.296548][T20940] ? syscall_enter_from_user_mode+0x26/0x80 [ 3314.302582][T20940] do_syscall_64+0x39/0xb0 [ 3314.307043][T20940] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.312977][T20940] RIP: 0033:0x7f461ea8d591 [ 3314.317420][T20940] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3314.337103][T20940] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3314.345596][T20940] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 08:18:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3e030000) 08:18:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfeffffff00000000) [ 3314.353607][T20940] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3314.361601][T20940] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3314.369591][T20940] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3314.377587][T20940] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3314.385629][T20940] [ 3314.419841][T20940] memory: usage 307200kB, limit 307200kB, failcnt 80519 [ 3314.428062][T20940] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3314.435566][T20940] Memory cgroup stats for /syz3: [ 3314.435831][T20940] anon 86016 [ 3314.435831][T20940] file 364544 [ 3314.435831][T20940] kernel 314122240 [ 3314.435831][T20940] kernel_stack 32768 [ 3314.435831][T20940] pagetables 69632 [ 3314.435831][T20940] sec_pagetables 0 [ 3314.435831][T20940] percpu 5432320 [ 3314.435831][T20940] sock 0 [ 3314.435831][T20940] vmalloc 8192 [ 3314.435831][T20940] shmem 339968 [ 3314.435831][T20940] zswap 0 [ 3314.435831][T20940] zswapped 0 [ 3314.435831][T20940] file_mapped 327680 [ 3314.435831][T20940] file_dirty 20480 [ 3314.435831][T20940] file_writeback 0 [ 3314.435831][T20940] swapcached 0 [ 3314.435831][T20940] anon_thp 0 [ 3314.435831][T20940] file_thp 0 [ 3314.435831][T20940] shmem_thp 0 [ 3314.435831][T20940] inactive_anon 385024 [ 3314.435831][T20940] active_anon 40960 [ 3314.435831][T20940] inactive_file 0 [ 3314.435831][T20940] active_file 24576 [ 3314.435831][T20940] unevictable 0 [ 3314.435831][T20940] slab_reclaimable 37184 [ 3314.435831][T20940] slab_unreclaimable 308494152 [ 3314.435831][T20940] slab 308531336 [ 3314.435831][T20940] workingset_refault_anon 0 [ 3314.435831][T20940] workingset_refault_file 2 [ 3314.435831][T20940] workingset_activate_anon 0 [ 3314.435831][T20940] workingset_activate_file 0 [ 3314.435831][T20940] workingset_restore_anon 0 [ 3314.435831][T20940] workingset_restore_file 0 [ 3314.435831][T20940] workingset_nodereclaim 0 [ 3314.435831][T20940] pgscan 54847 [ 3314.435831][T20940] pgsteal 449 [ 3314.435831][T20940] pgscan_kswapd 0 [ 3314.435831][T20940] pgscan_direct 54847 [ 3314.435831][T20940] pgscan_khugepaged 0 [ 3314.435831][T20940] pgsteal_kswapd 0 [ 3314.435831][T20940] pgsteal_direct 449 [ 3314.435831][T20940] pgsteal_khugepaged 0 [ 3314.435831][T20940] pgfault 415556 [ 3314.435831][T20940] pgmajfault 1 [ 3314.435831][T20940] pgrefill 201541 [ 3314.435831][T20940] pgactivate 54389 [ 3314.435831][T20940] pgdeactivate 0 [ 3314.435831][T20940] pglazyfree 0 [ 3314.435831][T20940] pglazyfreed 0 [ 3314.435831][T20940] zswpin 0 [ 3314.435831][T20940] zswpout 0 [ 3314.634397][T20940] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20940,uid=0 [ 3314.670114][T20940] Memory cgroup out of memory: Killed process 20940 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3314.695086][T20955] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3314.716866][T20955] CPU: 0 PID: 20955 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3314.727375][T20955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3314.737491][T20955] Call Trace: [ 3314.740819][T20955] [ 3314.743802][T20955] dump_stack_lvl+0x136/0x150 [ 3314.748564][T20955] dump_header+0x10a/0xd70 [ 3314.753079][T20955] oom_kill_process+0x25d/0x600 [ 3314.758020][T20955] out_of_memory+0x35c/0x1660 [ 3314.762792][T20955] ? oom_killer_disable+0x2b0/0x2b0 [ 3314.768082][T20955] ? rcu_read_unlock+0x9/0x60 [ 3314.772848][T20955] ? find_held_lock+0x2d/0x110 [ 3314.777716][T20955] mem_cgroup_out_of_memory+0x206/0x270 [ 3314.783385][T20955] ? mem_cgroup_margin+0x130/0x130 [ 3314.788588][T20955] ? lock_downgrade+0x690/0x690 [ 3314.793558][T20955] try_charge_memcg+0xf9b/0x13b0 [ 3314.798585][T20955] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3314.804630][T20955] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3314.810436][T20955] ? lock_downgrade+0x690/0x690 [ 3314.815393][T20955] ? lock_downgrade+0x690/0x690 [ 3314.820332][T20955] ? rcu_read_unlock+0x9/0x60 [ 3314.825147][T20955] obj_cgroup_charge+0x2af/0x5e0 [ 3314.830165][T20955] ? __alloc_file+0x21/0x270 [ 3314.834823][T20955] kmem_cache_alloc+0xb1/0x3b0 [ 3314.839751][T20955] ? d_instantiate+0x79/0xa0 [ 3314.844415][T20955] __alloc_file+0x21/0x270 [ 3314.848914][T20955] alloc_empty_file+0x71/0x190 [ 3314.853756][T20955] alloc_file+0x5e/0x800 [ 3314.858255][T20955] alloc_file_pseudo+0x169/0x250 [ 3314.863244][T20955] ? alloc_file+0x800/0x800 [ 3314.867790][T20955] ? do_raw_spin_unlock+0x175/0x230 [ 3314.873033][T20955] ? _raw_spin_unlock+0x28/0x40 [ 3314.877929][T20955] ? alloc_fd+0x2e4/0x750 [ 3314.882321][T20955] sock_alloc_file+0x53/0x190 [ 3314.887051][T20955] __sys_socket+0x1a8/0x250 [ 3314.891604][T20955] ? __sys_socket_file+0x1d0/0x1d0 [ 3314.896759][T20955] ? kcov_ioctl+0x384/0x6f0 [ 3314.901318][T20955] __x64_sys_socket+0x73/0xb0 [ 3314.906042][T20955] do_syscall_64+0x39/0xb0 [ 3314.910509][T20955] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3314.916460][T20955] RIP: 0033:0x7f79ea88c169 [ 3314.920906][T20955] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3314.940584][T20955] RSP: 002b:00007f79eb505168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3314.949069][T20955] RAX: ffffffffffffffda RBX: 00007f79ea9abf80 RCX: 00007f79ea88c169 [ 3314.957098][T20955] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 08:18:41 executing program 3: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r6, 0x0, 0x3) (async) write$binfmt_elf32(r6, 0x0, 0x3) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0xfd74) (async) write$binfmt_misc(r6, &(0x7f0000000080)=ANY=[], 0xfd74) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000380)={0x9, 0x49e, 0x800, 0xfa, 0x3, 0x59, 0x4c64}, 0xc) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000380)={0x9, 0x49e, 0x800, 0xfa, 0x3, 0x59, 0x4c64}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x14c, 0x10, 0x4, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, 0x10140, 0x10000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x66}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge0\x00'}, {0x14, 0x35, 'macvlan1\x00'}]}, @IFLA_LINK={0x8}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_NET_NS_PID={0x8}, @IFLA_CARRIER={0x5}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_VFINFO_LIST={0x9c, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1889, 0xffffffffffffffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x6, 0x3}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x8, 0x8}}]}, {0x68, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN={0x10, 0x2, {0x3, 0xfb8, 0xfffff001}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}, @IFLA_VF_MAC={0x28, 0x1, {0xffff}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfff}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x124c000000}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x14c}, 0x1, 0x0, 0x0, 0x40080}, 0x4040) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000073f7c4cdf6efb1e721a87373a5b0400f0ffffff00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) [ 3314.965111][T20955] RBP: 00007f79ea8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3314.973119][T20955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3314.981122][T20955] R13: 00007ffd939e5d3f R14: 00007f79eb505300 R15: 0000000000022000 [ 3314.989143][T20955] [ 3315.019443][T20955] memory: usage 307200kB, limit 307200kB, failcnt 75757 [ 3315.031808][T20955] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3315.041854][T20955] Memory cgroup stats for /syz4: [ 3315.042159][T20955] anon 106496 [ 3315.042159][T20955] file 327680 [ 3315.042159][T20955] kernel 314138624 [ 3315.042159][T20955] kernel_stack 65536 [ 3315.042159][T20955] pagetables 81920 [ 3315.042159][T20955] sec_pagetables 0 [ 3315.042159][T20955] percpu 5432256 [ 3315.042159][T20955] sock 0 [ 3315.042159][T20955] vmalloc 0 [ 3315.042159][T20955] shmem 311296 [ 3315.042159][T20955] zswap 0 [ 3315.042159][T20955] zswapped 0 [ 3315.042159][T20955] file_mapped 311296 [ 3315.042159][T20955] file_dirty 12288 [ 3315.042159][T20955] file_writeback 0 [ 3315.042159][T20955] swapcached 0 [ 3315.042159][T20955] anon_thp 0 [ 3315.042159][T20955] file_thp 0 [ 3315.042159][T20955] shmem_thp 0 [ 3315.042159][T20955] inactive_anon 36864 [ 3315.042159][T20955] active_anon 380928 [ 3315.042159][T20955] inactive_file 0 [ 3315.042159][T20955] active_file 16384 [ 3315.042159][T20955] unevictable 0 [ 3315.042159][T20955] slab_reclaimable 17400 [ 3315.042159][T20955] slab_unreclaimable 308494648 [ 3315.042159][T20955] slab 308512048 [ 3315.042159][T20955] workingset_refault_anon 0 [ 3315.042159][T20955] workingset_refault_file 0 [ 3315.042159][T20955] workingset_activate_anon 0 [ 3315.042159][T20955] workingset_activate_file 0 [ 3315.042159][T20955] workingset_restore_anon 0 [ 3315.042159][T20955] workingset_restore_file 0 [ 3315.042159][T20955] workingset_nodereclaim 0 [ 3315.042159][T20955] pgscan 49776 [ 3315.042159][T20955] pgsteal 483 [ 3315.042159][T20955] pgscan_kswapd 0 [ 3315.042159][T20955] pgscan_direct 49776 [ 3315.042159][T20955] pgscan_khugepaged 0 [ 3315.042159][T20955] pgsteal_kswapd 0 [ 3315.042159][T20955] pgsteal_direct 483 [ 3315.042159][T20955] pgsteal_khugepaged 0 [ 3315.042159][T20955] pgfault 403988 [ 3315.042159][T20955] pgmajfault 1 [ 3315.042159][T20955] pgrefill 135100 [ 3315.042159][T20955] pgactivate 49232 [ 3315.042159][T20955] pgdeactivate 0 [ 3315.042159][T20955] pglazyfree 0 [ 3315.042159][T20955] pglazyfreed 0 [ 3315.042159][T20955] zswpin 0 [ 3315.042159][T20955] zswpout 0 [ 3315.233830][T20955] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=20954,uid=0 [ 3315.250752][T20955] Memory cgroup out of memory: Killed process 20954 (syz-executor.4) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3315.285816][T20956] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3315.301967][T20956] CPU: 1 PID: 20956 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3315.312463][T20956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3315.322569][T20956] Call Trace: [ 3315.325883][T20956] [ 3315.328890][T20956] dump_stack_lvl+0x136/0x150 [ 3315.333630][T20956] dump_header+0x10a/0xd70 [ 3315.338118][T20956] oom_kill_process+0x25d/0x600 [ 3315.343035][T20956] out_of_memory+0x35c/0x1660 [ 3315.347796][T20956] ? oom_killer_disable+0x2b0/0x2b0 [ 3315.353048][T20956] ? rcu_read_unlock+0x9/0x60 [ 3315.357766][T20956] ? find_held_lock+0x2d/0x110 [ 3315.362600][T20956] mem_cgroup_out_of_memory+0x206/0x270 [ 3315.368209][T20956] ? mem_cgroup_margin+0x130/0x130 [ 3315.373376][T20956] ? lock_downgrade+0x690/0x690 [ 3315.378278][T20956] try_charge_memcg+0xf9b/0x13b0 [ 3315.383271][T20956] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3315.389293][T20956] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3315.395147][T20956] ? lock_downgrade+0x690/0x690 [ 3315.400033][T20956] ? lock_downgrade+0x690/0x690 [ 3315.404928][T20956] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3315.410507][T20956] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3315.416726][T20956] copy_process+0x4e3/0x7590 [ 3315.421355][T20956] ? find_held_lock+0x2d/0x110 [ 3315.426173][T20956] ? __cleanup_sighand+0xb0/0xb0 [ 3315.431151][T20956] ? lock_downgrade+0x690/0x690 [ 3315.436040][T20956] ? folio_flags.constprop.0+0x53/0x150 [ 3315.441638][T20956] ? folio_add_lru+0x47f/0x7c0 [ 3315.446462][T20956] kernel_clone+0xeb/0x890 [ 3315.450918][T20956] ? create_io_thread+0xf0/0xf0 [ 3315.455802][T20956] ? vm_iomap_memory+0x190/0x190 [ 3315.460782][T20956] ? find_held_lock+0x2d/0x110 [ 3315.465605][T20956] __do_sys_clone+0xba/0x100 [ 3315.470270][T20956] ? kernel_clone+0x890/0x890 [ 3315.475028][T20956] ? syscall_enter_from_user_mode+0x26/0x80 [ 3315.481495][T20956] do_syscall_64+0x39/0xb0 [ 3315.485968][T20956] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3315.492074][T20956] RIP: 0033:0x7faa0ba8d591 [ 3315.496605][T20956] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3315.516245][T20956] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3315.524690][T20956] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 08:18:42 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc653030000000000) [ 3315.532694][T20956] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3315.540707][T20956] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3315.548800][T20956] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3315.556816][T20956] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3315.564844][T20956] [ 3315.570154][T20956] memory: usage 307200kB, limit 307200kB, failcnt 92992 [ 3315.594797][T20956] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3315.602438][T20956] Memory cgroup stats for /syz1: [ 3315.602705][T20956] anon 98304 [ 3315.602705][T20956] file 356352 [ 3315.602705][T20956] kernel 314118144 [ 3315.602705][T20956] kernel_stack 65536 [ 3315.602705][T20956] pagetables 81920 [ 3315.602705][T20956] sec_pagetables 0 [ 3315.602705][T20956] percpu 5423968 [ 3315.602705][T20956] sock 0 [ 3315.602705][T20956] vmalloc 16384 [ 3315.602705][T20956] shmem 339968 [ 3315.602705][T20956] zswap 0 [ 3315.602705][T20956] zswapped 0 [ 3315.602705][T20956] file_mapped 262144 [ 3315.602705][T20956] file_dirty 12288 [ 3315.602705][T20956] file_writeback 0 [ 3315.602705][T20956] swapcached 0 [ 3315.602705][T20956] anon_thp 0 [ 3315.602705][T20956] file_thp 0 [ 3315.602705][T20956] shmem_thp 0 [ 3315.602705][T20956] inactive_anon 32768 [ 3315.602705][T20956] active_anon 405504 [ 3315.602705][T20956] inactive_file 0 [ 3315.602705][T20956] active_file 16384 [ 3315.602705][T20956] unevictable 0 [ 3315.602705][T20956] slab_reclaimable 245608 [ 3315.602705][T20956] slab_unreclaimable 308232776 [ 3315.602705][T20956] slab 308478384 [ 3315.602705][T20956] workingset_refault_anon 0 [ 3315.602705][T20956] workingset_refault_file 4 [ 3315.602705][T20956] workingset_activate_anon 0 [ 3315.602705][T20956] workingset_activate_file 0 [ 3315.602705][T20956] workingset_restore_anon 0 [ 3315.602705][T20956] workingset_restore_file 2 [ 3315.602705][T20956] workingset_nodereclaim 0 [ 3315.602705][T20956] pgscan 78306 [ 3315.602705][T20956] pgsteal 592 [ 3315.602705][T20956] pgscan_kswapd 0 [ 3315.602705][T20956] pgscan_direct 78306 [ 3315.602705][T20956] pgscan_khugepaged 0 [ 3315.602705][T20956] pgsteal_kswapd 0 [ 3315.602705][T20956] pgsteal_direct 592 [ 3315.602705][T20956] pgsteal_khugepaged 0 [ 3315.602705][T20956] pgfault 409178 [ 3315.602705][T20956] pgmajfault 0 [ 3315.602705][T20956] pgrefill 211924 [ 3315.602705][T20956] pgactivate 77621 [ 3315.602705][T20956] pgdeactivate 0 [ 3315.602705][T20956] pglazyfree 0 [ 3315.602705][T20956] pglazyfreed 0 [ 3315.602705][T20956] zswpin 0 [ 3315.602705][T20956] zswpout 0 08:18:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf7580300) [ 3315.798300][T20956] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20956,uid=0 [ 3315.815045][T20956] Memory cgroup out of memory: Killed process 20956 (syz-executor.1) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3315.837007][T20957] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3315.865795][T20957] CPU: 0 PID: 20957 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3315.876314][T20957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3315.886428][T20957] Call Trace: [ 3315.889755][T20957] [ 3315.892759][T20957] dump_stack_lvl+0x136/0x150 [ 3315.897587][T20957] dump_header+0x10a/0xd70 [ 3315.902087][T20957] oom_kill_process+0x25d/0x600 [ 3315.907016][T20957] out_of_memory+0x35c/0x1660 08:18:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xff0f000000000000) [ 3315.911775][T20957] ? oom_killer_disable+0x2b0/0x2b0 [ 3315.917043][T20957] ? rcu_read_unlock+0x9/0x60 [ 3315.921796][T20957] ? find_held_lock+0x2d/0x110 [ 3315.926645][T20957] mem_cgroup_out_of_memory+0x206/0x270 [ 3315.932277][T20957] ? mem_cgroup_margin+0x130/0x130 [ 3315.937467][T20957] ? lock_downgrade+0x690/0x690 [ 3315.942409][T20957] try_charge_memcg+0xf9b/0x13b0 [ 3315.947424][T20957] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3315.953493][T20957] ? rcu_read_unlock+0x9/0x60 [ 3315.958248][T20957] ? lock_downgrade+0x690/0x690 [ 3315.963198][T20957] charge_memcg+0x90/0x3b0 [ 3315.967688][T20957] __mem_cgroup_charge+0x2b/0x90 [ 3315.972689][T20957] ? copy_mc_to_kernel+0x3e/0x90 [ 3315.977806][T20957] do_wp_page+0x8eb/0x3520 [ 3315.982318][T20957] ? lock_release+0x670/0x670 [ 3315.987065][T20957] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3315.992560][T20957] ? do_raw_spin_lock+0x124/0x2b0 [ 3315.997665][T20957] ? spin_bug+0x1c0/0x1c0 [ 3316.002072][T20957] ? lock_downgrade+0x690/0x690 [ 3316.007005][T20957] __handle_mm_fault+0x19a1/0x3e60 [ 3316.012198][T20957] ? vm_iomap_memory+0x190/0x190 [ 3316.017241][T20957] handle_mm_fault+0x2ba/0x9c0 [ 3316.022129][T20957] do_user_addr_fault+0x475/0x1230 [ 3316.027330][T20957] ? rcu_is_watching+0x12/0xb0 [ 3316.032266][T20957] exc_page_fault+0x98/0x170 [ 3316.037285][T20957] asm_exc_page_fault+0x26/0x30 [ 3316.042220][T20957] RIP: 0033:0x7f9ac62366e5 [ 3316.046671][T20957] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3316.066328][T20957] RSP: 002b:00007ffc61d0e9d0 EFLAGS: 00010206 [ 3316.072430][T20957] RAX: 0000000000000003 RBX: 00007f9ac63abf80 RCX: 00007f9ac63a80c0 [ 3316.080433][T20957] RDX: 00007f9ac63a80c0 RSI: 0000000000000080 RDI: 00007f9ac63abf80 [ 3316.088442][T20957] RBP: 00007f9ac63abf80 R08: 00007ffc61d6c080 R09: 0000000000000000 [ 3316.096461][T20957] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 0000000000328f5e [ 3316.104467][T20957] R13: 00007ffc61d0eae0 R14: 00007f9ac63abf80 R15: 0000000000000032 [ 3316.112487][T20957] [ 3316.177852][T20957] memory: usage 307180kB, limit 307200kB, failcnt 69960 [ 3316.197293][T20957] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3316.204535][T20957] Memory cgroup stats for /syz2: [ 3316.204820][T20957] anon 94208 [ 3316.204820][T20957] file 364544 [ 3316.204820][T20957] kernel 314093568 [ 3316.204820][T20957] kernel_stack 65536 [ 3316.204820][T20957] pagetables 69632 [ 3316.204820][T20957] sec_pagetables 0 [ 3316.204820][T20957] percpu 5428704 [ 3316.204820][T20957] sock 0 [ 3316.204820][T20957] vmalloc 0 [ 3316.204820][T20957] shmem 348160 [ 3316.204820][T20957] zswap 0 [ 3316.204820][T20957] zswapped 0 [ 3316.204820][T20957] file_mapped 311296 [ 3316.204820][T20957] file_dirty 12288 [ 3316.204820][T20957] file_writeback 0 [ 3316.204820][T20957] swapcached 0 [ 3316.204820][T20957] anon_thp 0 [ 3316.204820][T20957] file_thp 0 [ 3316.204820][T20957] shmem_thp 0 [ 3316.204820][T20957] inactive_anon 397312 [ 3316.204820][T20957] active_anon 45056 [ 3316.204820][T20957] inactive_file 8192 [ 3316.204820][T20957] active_file 8192 [ 3316.204820][T20957] unevictable 0 [ 3316.204820][T20957] slab_reclaimable 218152 [ 3316.204820][T20957] slab_unreclaimable 308286168 [ 3316.204820][T20957] slab 308504320 [ 3316.204820][T20957] workingset_refault_anon 0 [ 3316.204820][T20957] workingset_refault_file 0 [ 3316.204820][T20957] workingset_activate_anon 0 [ 3316.204820][T20957] workingset_activate_file 0 [ 3316.204820][T20957] workingset_restore_anon 0 [ 3316.204820][T20957] workingset_restore_file 0 [ 3316.204820][T20957] workingset_nodereclaim 0 [ 3316.204820][T20957] pgscan 54240 [ 3316.204820][T20957] pgsteal 456 [ 3316.204820][T20957] pgscan_kswapd 0 [ 3316.204820][T20957] pgscan_direct 54240 [ 3316.204820][T20957] pgscan_khugepaged 0 [ 3316.204820][T20957] pgsteal_kswapd 0 [ 3316.204820][T20957] pgsteal_direct 456 [ 3316.204820][T20957] pgsteal_khugepaged 0 [ 3316.204820][T20957] pgfault 421097 [ 3316.204820][T20957] pgmajfault 1 [ 3316.204820][T20957] pgrefill 180034 [ 3316.204820][T20957] pgactivate 53745 [ 3316.204820][T20957] pgdeactivate 0 [ 3316.204820][T20957] pglazyfree 0 [ 3316.204820][T20957] pglazyfreed 0 [ 3316.204820][T20957] zswpin 0 [ 3316.204820][T20957] zswpout 0 [ 3316.407850][T20957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20957,uid=0 08:18:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3e510300) [ 3316.425462][T20957] Memory cgroup out of memory: Killed process 20957 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3316.447548][T20962] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3316.473518][T20962] CPU: 1 PID: 20962 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3316.484563][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3316.494856][T20962] Call Trace: [ 3316.498186][T20962] [ 3316.501161][T20962] dump_stack_lvl+0x136/0x150 [ 3316.505904][T20962] dump_header+0x10a/0xd70 [ 3316.510392][T20962] oom_kill_process+0x25d/0x600 [ 3316.515315][T20962] out_of_memory+0x35c/0x1660 [ 3316.520064][T20962] ? oom_killer_disable+0x2b0/0x2b0 [ 3316.525326][T20962] ? rcu_read_unlock+0x9/0x60 [ 3316.530073][T20962] ? find_held_lock+0x2d/0x110 [ 3316.534962][T20962] mem_cgroup_out_of_memory+0x206/0x270 [ 3316.540607][T20962] ? mem_cgroup_margin+0x130/0x130 [ 3316.545804][T20962] ? lock_downgrade+0x690/0x690 [ 3316.550744][T20962] try_charge_memcg+0xf9b/0x13b0 [ 3316.555755][T20962] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3316.561797][T20962] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3316.567601][T20962] ? lock_downgrade+0x690/0x690 [ 3316.572509][T20962] ? lock_downgrade+0x690/0x690 [ 3316.577410][T20962] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3316.583080][T20962] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3316.589283][T20962] copy_process+0x4e3/0x7590 [ 3316.593915][T20962] ? folio_flags.constprop.0+0x53/0x150 [ 3316.599512][T20962] ? free_swap_cache+0x1b5/0x3d0 [ 3316.604503][T20962] ? do_wp_page+0x4be/0x3520 [ 3316.609148][T20962] ? __cleanup_sighand+0xb0/0xb0 [ 3316.614131][T20962] ? spin_bug+0x1c0/0x1c0 [ 3316.618506][T20962] ? lock_downgrade+0x690/0x690 [ 3316.623489][T20962] kernel_clone+0xeb/0x890 [ 3316.627947][T20962] ? create_io_thread+0xf0/0xf0 [ 3316.632834][T20962] ? vm_iomap_memory+0x190/0x190 [ 3316.637898][T20962] ? find_held_lock+0x2d/0x110 [ 3316.642722][T20962] __do_sys_clone+0xba/0x100 [ 3316.647347][T20962] ? kernel_clone+0x890/0x890 [ 3316.652074][T20962] ? syscall_enter_from_user_mode+0x26/0x80 [ 3316.658016][T20962] do_syscall_64+0x39/0xb0 [ 3316.662476][T20962] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3316.668408][T20962] RIP: 0033:0x7f461ea8d591 [ 3316.672850][T20962] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3316.692603][T20962] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3316.701053][T20962] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3316.709054][T20962] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3316.717056][T20962] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3316.725054][T20962] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3316.733052][T20962] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3316.741077][T20962] [ 3316.748121][T20962] memory: usage 307200kB, limit 307200kB, failcnt 80641 [ 3316.755331][T20962] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3316.762553][T20962] Memory cgroup stats for /syz3: [ 3316.762815][T20962] anon 86016 [ 3316.762815][T20962] file 364544 [ 3316.762815][T20962] kernel 314122240 [ 3316.762815][T20962] kernel_stack 32768 [ 3316.762815][T20962] pagetables 69632 [ 3316.762815][T20962] sec_pagetables 0 [ 3316.762815][T20962] percpu 5432320 [ 3316.762815][T20962] sock 0 [ 3316.762815][T20962] vmalloc 8192 [ 3316.762815][T20962] shmem 339968 [ 3316.762815][T20962] zswap 0 [ 3316.762815][T20962] zswapped 0 [ 3316.762815][T20962] file_mapped 327680 [ 3316.762815][T20962] file_dirty 20480 [ 3316.762815][T20962] file_writeback 0 [ 3316.762815][T20962] swapcached 0 [ 3316.762815][T20962] anon_thp 0 [ 3316.762815][T20962] file_thp 0 [ 3316.762815][T20962] shmem_thp 0 [ 3316.762815][T20962] inactive_anon 389120 [ 3316.762815][T20962] active_anon 36864 [ 3316.762815][T20962] inactive_file 0 [ 3316.762815][T20962] active_file 24576 [ 3316.762815][T20962] unevictable 0 [ 3316.762815][T20962] slab_reclaimable 37184 [ 3316.762815][T20962] slab_unreclaimable 308494152 [ 3316.762815][T20962] slab 308531336 [ 3316.762815][T20962] workingset_refault_anon 0 [ 3316.762815][T20962] workingset_refault_file 2 [ 3316.762815][T20962] workingset_activate_anon 0 [ 3316.762815][T20962] workingset_activate_file 0 [ 3316.762815][T20962] workingset_restore_anon 0 [ 3316.762815][T20962] workingset_restore_file 0 [ 3316.762815][T20962] workingset_nodereclaim 0 [ 3316.762815][T20962] pgscan 54944 [ 3316.762815][T20962] pgsteal 449 [ 3316.762815][T20962] pgscan_kswapd 0 [ 3316.762815][T20962] pgscan_direct 54944 [ 3316.762815][T20962] pgscan_khugepaged 0 [ 3316.762815][T20962] pgsteal_kswapd 0 [ 3316.762815][T20962] pgsteal_direct 449 [ 3316.762815][T20962] pgsteal_khugepaged 0 [ 3316.762815][T20962] pgfault 415598 [ 3316.762815][T20962] pgmajfault 1 [ 3316.762815][T20962] pgrefill 202414 08:18:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd0030000) [ 3316.762815][T20962] pgactivate 54486 [ 3316.762815][T20962] pgdeactivate 0 [ 3316.762815][T20962] pglazyfree 0 [ 3316.762815][T20962] pglazyfreed 0 [ 3316.762815][T20962] zswpin 0 [ 3316.762815][T20962] zswpout 0 [ 3316.971146][T20962] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20962,uid=0 [ 3316.988284][T20962] Memory cgroup out of memory: Killed process 20962 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3317.008427][T20968] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3317.025229][T20968] CPU: 1 PID: 20968 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3317.035834][T20968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3317.045959][T20968] Call Trace: [ 3317.049291][T20968] [ 3317.052278][T20968] dump_stack_lvl+0x136/0x150 [ 3317.057028][T20968] dump_header+0x10a/0xd70 [ 3317.061523][T20968] oom_kill_process+0x25d/0x600 [ 3317.066442][T20968] out_of_memory+0x35c/0x1660 [ 3317.071203][T20968] ? oom_killer_disable+0x2b0/0x2b0 [ 3317.076654][T20968] ? rcu_read_unlock+0x9/0x60 [ 3317.081496][T20968] ? find_held_lock+0x2d/0x110 [ 3317.086447][T20968] mem_cgroup_out_of_memory+0x206/0x270 [ 3317.092087][T20968] ? mem_cgroup_margin+0x130/0x130 [ 3317.097280][T20968] ? lock_downgrade+0x690/0x690 [ 3317.102230][T20968] try_charge_memcg+0xf9b/0x13b0 [ 3317.107258][T20968] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3317.113315][T20968] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3317.119272][T20968] ? lock_downgrade+0x690/0x690 [ 3317.124292][T20968] ? lock_downgrade+0x690/0x690 [ 3317.129244][T20968] obj_cgroup_charge+0x2af/0x5e0 [ 3317.134283][T20968] ? sock_alloc_inode+0x27/0x1d0 [ 3317.139307][T20968] kmem_cache_alloc_lru+0x142/0x600 [ 3317.144612][T20968] sock_alloc_inode+0x27/0x1d0 [ 3317.149450][T20968] ? sock_free_inode+0x30/0x30 [ 3317.154298][T20968] alloc_inode+0x61/0x230 [ 3317.158711][T20968] new_inode_pseudo+0x17/0x80 [ 3317.163465][T20968] sock_alloc+0x40/0x270 [ 3317.167778][T20968] __sock_create+0xbd/0x850 [ 3317.172364][T20968] __sys_socket+0x133/0x250 [ 3317.176946][T20968] ? __sys_socket_file+0x1d0/0x1d0 [ 3317.182130][T20968] ? kcov_ioctl+0x384/0x6f0 [ 3317.186700][T20968] __x64_sys_socket+0x73/0xb0 [ 3317.191450][T20968] do_syscall_64+0x39/0xb0 [ 3317.195948][T20968] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3317.201917][T20968] RIP: 0033:0x7fb9a048c169 [ 3317.206387][T20968] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3317.226079][T20968] RSP: 002b:00007fb99effe168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3317.234556][T20968] RAX: ffffffffffffffda RBX: 00007fb9a05abf80 RCX: 00007fb9a048c169 [ 3317.242560][T20968] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3317.250572][T20968] RBP: 00007fb9a04e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3317.258673][T20968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3317.266701][T20968] R13: 00007ffd5d45cfcf R14: 00007fb99effe300 R15: 0000000000022000 [ 3317.274726][T20968] 08:18:43 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newlinkprop={0x34, 0x6c, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x810}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8, 0x1b, 0x33}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4020) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c5c1000000000000018320203a3b83404a80d3d7e473b508502fbf7fdb44d8840c2ff16d4f049307338d6d202", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) [ 3317.285436][T20968] memory: usage 307200kB, limit 307200kB, failcnt 79068 [ 3317.293216][T20968] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3317.302275][T20968] Memory cgroup stats for /syz0: [ 3317.302563][T20968] anon 102400 [ 3317.302563][T20968] file 360448 [ 3317.302563][T20968] kernel 314109952 [ 3317.302563][T20968] kernel_stack 98304 [ 3317.302563][T20968] pagetables 81920 [ 3317.302563][T20968] sec_pagetables 0 [ 3317.302563][T20968] percpu 5432256 [ 3317.302563][T20968] sock 0 [ 3317.302563][T20968] vmalloc 0 [ 3317.302563][T20968] shmem 344064 [ 3317.302563][T20968] zswap 0 [ 3317.302563][T20968] zswapped 0 [ 3317.302563][T20968] file_mapped 327680 [ 3317.302563][T20968] file_dirty 12288 [ 3317.302563][T20968] file_writeback 0 [ 3317.302563][T20968] swapcached 0 [ 3317.302563][T20968] anon_thp 0 [ 3317.302563][T20968] file_thp 0 [ 3317.302563][T20968] shmem_thp 0 [ 3317.302563][T20968] inactive_anon 36864 [ 3317.302563][T20968] active_anon 409600 [ 3317.302563][T20968] inactive_file 0 [ 3317.302563][T20968] active_file 16384 [ 3317.302563][T20968] unevictable 0 [ 3317.302563][T20968] slab_reclaimable 17040 [ 3317.302563][T20968] slab_unreclaimable 308454688 [ 3317.302563][T20968] slab 308471728 [ 3317.302563][T20968] workingset_refault_anon 0 [ 3317.302563][T20968] workingset_refault_file 4 [ 3317.302563][T20968] workingset_activate_anon 0 [ 3317.302563][T20968] workingset_activate_file 0 [ 3317.302563][T20968] workingset_restore_anon 0 [ 3317.302563][T20968] workingset_restore_file 1 [ 3317.302563][T20968] workingset_nodereclaim 0 [ 3317.302563][T20968] pgscan 60445 [ 3317.302563][T20968] pgsteal 554 [ 3317.302563][T20968] pgscan_kswapd 0 [ 3317.302563][T20968] pgscan_direct 60445 [ 3317.302563][T20968] pgscan_khugepaged 0 [ 3317.302563][T20968] pgsteal_kswapd 0 [ 3317.302563][T20968] pgsteal_direct 554 [ 3317.302563][T20968] pgsteal_khugepaged 0 [ 3317.302563][T20968] pgfault 435957 [ 3317.302563][T20968] pgmajfault 2 [ 3317.302563][T20968] pgrefill 196027 [ 3317.302563][T20968] pgactivate 59794 [ 3317.302563][T20968] pgdeactivate 0 [ 3317.302563][T20968] pglazyfree 0 [ 3317.302563][T20968] pglazyfreed 0 [ 3317.302563][T20968] zswpin 0 [ 3317.302563][T20968] zswpout 0 [ 3317.503772][T20968] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20966,uid=0 08:18:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf8030000) [ 3317.520612][T20968] Memory cgroup out of memory: Killed process 20966 (syz-executor.0) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3317.539579][T20969] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3317.555950][T20969] CPU: 1 PID: 20969 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3317.566447][T20969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3317.576569][T20969] Call Trace: [ 3317.579934][T20969] [ 3317.582911][T20969] dump_stack_lvl+0x136/0x150 [ 3317.587661][T20969] dump_header+0x10a/0xd70 [ 3317.592138][T20969] oom_kill_process+0x25d/0x600 [ 3317.597105][T20969] out_of_memory+0x35c/0x1660 [ 3317.601860][T20969] ? oom_killer_disable+0x2b0/0x2b0 [ 3317.607129][T20969] ? rcu_read_unlock+0x9/0x60 [ 3317.612663][T20969] ? find_held_lock+0x2d/0x110 [ 3317.617511][T20969] mem_cgroup_out_of_memory+0x206/0x270 [ 3317.623137][T20969] ? mem_cgroup_margin+0x130/0x130 [ 3317.628421][T20969] ? lock_downgrade+0x690/0x690 [ 3317.633360][T20969] try_charge_memcg+0xf9b/0x13b0 [ 3317.638558][T20969] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3317.644686][T20969] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3317.650572][T20969] ? lock_downgrade+0x690/0x690 [ 3317.655489][T20969] ? lock_downgrade+0x690/0x690 [ 3317.660422][T20969] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3317.666127][T20969] __alloc_pages+0x1f3/0x4a0 [ 3317.670886][T20969] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3317.677994][T20969] ? print_usage_bug.part.0+0x660/0x660 [ 3317.683614][T20969] ? find_held_lock+0x2d/0x110 [ 3317.688454][T20969] alloc_pages+0x1aa/0x270 [ 3317.692941][T20969] pte_alloc_one+0x1a/0x230 [ 3317.697497][T20969] __pte_alloc+0x6d/0x260 [ 3317.701875][T20969] ? pmd_install+0x160/0x160 [ 3317.706490][T20969] ? _raw_spin_unlock+0x28/0x40 [ 3317.711412][T20969] ? __pmd_alloc+0x30c/0x5d0 [ 3317.716072][T20969] __handle_mm_fault+0x3626/0x3e60 [ 3317.721252][T20969] ? vm_iomap_memory+0x190/0x190 [ 3317.726266][T20969] handle_mm_fault+0x2ba/0x9c0 [ 3317.731094][T20969] do_user_addr_fault+0x475/0x1230 [ 3317.736296][T20969] ? rcu_is_watching+0x12/0xb0 [ 3317.741104][T20969] exc_page_fault+0x98/0x170 [ 3317.745753][T20969] asm_exc_page_fault+0x26/0x30 [ 3317.750656][T20969] RIP: 0033:0x7faa0ba2bde9 [ 3317.755119][T20969] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3317.774850][T20969] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3317.780961][T20969] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3317.789148][T20969] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3317.797171][T20969] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3317.805184][T20969] R10: 00007faa0b600068 R11: 0000000000000246 R12: 00000000003292d7 [ 3317.813181][T20969] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3317.821213][T20969] [ 3317.831361][T20969] memory: usage 307200kB, limit 307200kB, failcnt 93118 [ 3317.838608][T20969] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3317.845633][T20969] Memory cgroup stats for /syz1: [ 3317.845919][T20969] anon 126976 [ 3317.845919][T20969] file 356352 [ 3317.845919][T20969] kernel 314089472 [ 3317.845919][T20969] kernel_stack 65536 [ 3317.845919][T20969] pagetables 77824 [ 3317.845919][T20969] sec_pagetables 0 [ 3317.845919][T20969] percpu 5424032 [ 3317.845919][T20969] sock 0 [ 3317.845919][T20969] vmalloc 16384 [ 3317.845919][T20969] shmem 339968 [ 3317.845919][T20969] zswap 0 [ 3317.845919][T20969] zswapped 0 [ 3317.845919][T20969] file_mapped 262144 [ 3317.845919][T20969] file_dirty 12288 [ 3317.845919][T20969] file_writeback 0 [ 3317.845919][T20969] swapcached 0 [ 3317.845919][T20969] anon_thp 0 [ 3317.845919][T20969] file_thp 0 [ 3317.845919][T20969] shmem_thp 0 [ 3317.845919][T20969] inactive_anon 57344 [ 3317.845919][T20969] active_anon 409600 [ 3317.845919][T20969] inactive_file 0 [ 3317.845919][T20969] active_file 16384 [ 3317.845919][T20969] unevictable 0 [ 3317.845919][T20969] slab_reclaimable 245608 [ 3317.845919][T20969] slab_unreclaimable 308229768 [ 3317.845919][T20969] slab 308475376 [ 3317.845919][T20969] workingset_refault_anon 0 [ 3317.845919][T20969] workingset_refault_file 4 [ 3317.845919][T20969] workingset_activate_anon 0 [ 3317.845919][T20969] workingset_activate_file 0 [ 3317.845919][T20969] workingset_restore_anon 0 [ 3317.845919][T20969] workingset_restore_file 2 [ 3317.845919][T20969] workingset_nodereclaim 0 [ 3317.845919][T20969] pgscan 78390 [ 3317.845919][T20969] pgsteal 592 [ 3317.845919][T20969] pgscan_kswapd 0 [ 3317.845919][T20969] pgscan_direct 78390 [ 3317.845919][T20969] pgscan_khugepaged 0 [ 3317.845919][T20969] pgsteal_kswapd 0 [ 3317.845919][T20969] pgsteal_direct 592 [ 3317.845919][T20969] pgsteal_khugepaged 0 [ 3317.845919][T20969] pgfault 409236 [ 3317.845919][T20969] pgmajfault 0 [ 3317.845919][T20969] pgrefill 212425 [ 3317.845919][T20969] pgactivate 77705 [ 3317.845919][T20969] pgdeactivate 0 [ 3317.845919][T20969] pglazyfree 0 [ 3317.845919][T20969] pglazyfreed 0 [ 3317.845919][T20969] zswpin 0 [ 3317.845919][T20969] zswpout 0 08:18:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xff7f000000000000) [ 3318.037776][T20969] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20969,uid=0 [ 3318.053919][T20969] Memory cgroup out of memory: Killed process 20969 (syz-executor.1) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3318.076692][T20972] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3318.097039][T20972] CPU: 0 PID: 20972 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3318.107571][T20972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3318.117766][T20972] Call Trace: [ 3318.121098][T20972] [ 3318.124080][T20972] dump_stack_lvl+0x136/0x150 [ 3318.128831][T20972] dump_header+0x10a/0xd70 [ 3318.133329][T20972] oom_kill_process+0x25d/0x600 [ 3318.138258][T20972] out_of_memory+0x35c/0x1660 [ 3318.143023][T20972] ? oom_killer_disable+0x2b0/0x2b0 [ 3318.148390][T20972] ? rcu_read_unlock+0x9/0x60 [ 3318.153207][T20972] ? find_held_lock+0x2d/0x110 [ 3318.158054][T20972] mem_cgroup_out_of_memory+0x206/0x270 [ 3318.163688][T20972] ? mem_cgroup_margin+0x130/0x130 [ 3318.168899][T20972] ? lock_downgrade+0x690/0x690 [ 3318.173897][T20972] try_charge_memcg+0xf9b/0x13b0 [ 3318.178908][T20972] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3318.184965][T20972] ? rcu_read_unlock+0x9/0x60 [ 3318.189714][T20972] ? lock_downgrade+0x690/0x690 [ 3318.194655][T20972] charge_memcg+0x90/0x3b0 [ 3318.199146][T20972] __mem_cgroup_charge+0x2b/0x90 [ 3318.204155][T20972] do_wp_page+0x8eb/0x3520 [ 3318.208644][T20972] ? lock_release+0x670/0x670 [ 3318.213469][T20972] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3318.218917][T20972] ? do_raw_spin_lock+0x124/0x2b0 [ 3318.224000][T20972] ? spin_bug+0x1c0/0x1c0 [ 3318.228359][T20972] ? lock_downgrade+0x690/0x690 [ 3318.233255][T20972] __handle_mm_fault+0x19a1/0x3e60 [ 3318.238434][T20972] ? vm_iomap_memory+0x190/0x190 [ 3318.243430][T20972] handle_mm_fault+0x2ba/0x9c0 [ 3318.248251][T20972] do_user_addr_fault+0x475/0x1230 [ 3318.253456][T20972] ? rcu_is_watching+0x12/0xb0 [ 3318.258270][T20972] exc_page_fault+0x98/0x170 [ 3318.262893][T20972] asm_exc_page_fault+0x26/0x30 [ 3318.267863][T20972] RIP: 0033:0x7f9ac6239610 [ 3318.272313][T20972] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 08:18:44 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc753030000000000) [ 3318.291981][T20972] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3318.299310][T20972] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3318.307328][T20972] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3318.315328][T20972] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3318.323342][T20972] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3318.331346][T20972] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3318.339355][T20972] ? __x64_sys_socket+0x11/0xb0 [ 3318.344283][T20972] [ 3318.382738][T20972] memory: usage 307200kB, limit 307200kB, failcnt 70041 [ 3318.393131][T20972] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3318.400634][T20972] Memory cgroup stats for /syz2: [ 3318.400906][T20972] anon 98304 [ 3318.400906][T20972] file 364544 [ 3318.400906][T20972] kernel 314109952 [ 3318.400906][T20972] kernel_stack 65536 [ 3318.400906][T20972] pagetables 69632 [ 3318.400906][T20972] sec_pagetables 0 [ 3318.400906][T20972] percpu 5428768 [ 3318.400906][T20972] sock 0 [ 3318.400906][T20972] vmalloc 0 [ 3318.400906][T20972] shmem 348160 [ 3318.400906][T20972] zswap 0 [ 3318.400906][T20972] zswapped 0 [ 3318.400906][T20972] file_mapped 311296 [ 3318.400906][T20972] file_dirty 12288 [ 3318.400906][T20972] file_writeback 0 [ 3318.400906][T20972] swapcached 0 [ 3318.400906][T20972] anon_thp 0 [ 3318.400906][T20972] file_thp 0 [ 3318.400906][T20972] shmem_thp 0 [ 3318.400906][T20972] inactive_anon 421888 [ 3318.400906][T20972] active_anon 24576 [ 3318.400906][T20972] inactive_file 8192 [ 3318.400906][T20972] active_file 8192 [ 3318.400906][T20972] unevictable 0 [ 3318.400906][T20972] slab_reclaimable 218152 [ 3318.400906][T20972] slab_unreclaimable 308298080 [ 3318.400906][T20972] slab 308516232 [ 3318.400906][T20972] workingset_refault_anon 0 [ 3318.400906][T20972] workingset_refault_file 0 [ 3318.400906][T20972] workingset_activate_anon 0 [ 3318.400906][T20972] workingset_activate_file 0 [ 3318.400906][T20972] workingset_restore_anon 0 [ 3318.400906][T20972] workingset_restore_file 0 [ 3318.400906][T20972] workingset_nodereclaim 0 [ 3318.400906][T20972] pgscan 54263 [ 3318.400906][T20972] pgsteal 456 [ 3318.400906][T20972] pgscan_kswapd 0 [ 3318.400906][T20972] pgscan_direct 54263 [ 3318.400906][T20972] pgscan_khugepaged 0 [ 3318.400906][T20972] pgsteal_kswapd 0 [ 3318.400906][T20972] pgsteal_direct 456 [ 3318.400906][T20972] pgsteal_khugepaged 0 [ 3318.400906][T20972] pgfault 421141 [ 3318.400906][T20972] pgmajfault 1 [ 3318.400906][T20972] pgrefill 180171 [ 3318.400906][T20972] pgactivate 53768 [ 3318.400906][T20972] pgdeactivate 0 [ 3318.400906][T20972] pglazyfree 0 [ 3318.400906][T20972] pglazyfreed 0 [ 3318.400906][T20972] zswpin 0 [ 3318.400906][T20972] zswpout 0 [ 3318.594190][T20972] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20972,uid=0 [ 3318.614789][T20972] Memory cgroup out of memory: Killed process 20972 (syz-executor.2) total-vm:54548kB, anon-rss:416kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:18:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3f000000) [ 3318.712863][T20975] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3318.726780][T20975] CPU: 1 PID: 20975 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3318.737505][T20975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3318.747711][T20975] Call Trace: [ 3318.751025][T20975] [ 3318.753994][T20975] dump_stack_lvl+0x136/0x150 [ 3318.758757][T20975] dump_header+0x10a/0xd70 [ 3318.763253][T20975] oom_kill_process+0x25d/0x600 [ 3318.768176][T20975] out_of_memory+0x35c/0x1660 [ 3318.772936][T20975] ? find_held_lock+0x2d/0x110 [ 3318.777855][T20975] ? oom_killer_disable+0x2b0/0x2b0 [ 3318.783213][T20975] ? rcu_read_unlock+0x9/0x60 [ 3318.787962][T20975] ? find_held_lock+0x2d/0x110 [ 3318.792815][T20975] mem_cgroup_out_of_memory+0x206/0x270 [ 3318.798445][T20975] ? mem_cgroup_margin+0x130/0x130 [ 3318.803638][T20975] ? lock_downgrade+0x690/0x690 [ 3318.808597][T20975] try_charge_memcg+0xf9b/0x13b0 [ 3318.813624][T20975] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3318.819685][T20975] ? rcu_read_unlock+0x9/0x60 [ 3318.824437][T20975] ? lock_downgrade+0x690/0x690 [ 3318.829379][T20975] charge_memcg+0x90/0x3b0 [ 3318.833913][T20975] __mem_cgroup_charge+0x2b/0x90 [ 3318.838971][T20975] do_wp_page+0x8eb/0x3520 [ 3318.843571][T20975] ? lock_release+0x670/0x670 [ 3318.848320][T20975] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3318.848501][T20984] warn_alloc: 5 callbacks suppressed [ 3318.848520][T20984] syz-executor.4: vmalloc error: size 0, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3318.853749][T20975] ? do_raw_spin_lock+0x124/0x2b0 [ 3318.853793][T20975] ? spin_bug+0x1c0/0x1c0 [ 3318.853828][T20975] ? lock_downgrade+0x690/0x690 [ 3318.869056][T20984] ,cpuset= [ 3318.876563][T20975] __handle_mm_fault+0x19a1/0x3e60 [ 3318.876624][T20975] ? vm_iomap_memory+0x190/0x190 [ 3318.876691][T20975] handle_mm_fault+0x2ba/0x9c0 [ 3318.876738][T20975] do_user_addr_fault+0x475/0x1230 [ 3318.876785][T20975] ? rcu_is_watching+0x12/0xb0 [ 3318.876828][T20975] exc_page_fault+0x98/0x170 [ 3318.889234][T20984] syz4 [ 3318.891066][T20975] asm_exc_page_fault+0x26/0x30 [ 3318.895240][T20984] ,mems_allowed=0-1 [ 3318.899212][T20975] RIP: 0033:0x7f0e44a39610 [ 3318.899245][T20975] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3318.899275][T20975] RSP: 002b:00007ffc44a97870 EFLAGS: 00010246 [ 3318.899301][T20975] RAX: 00000000010d554f RBX: 00007f0e44bac018 RCX: 0000001b2ce20000 [ 3318.899321][T20975] RDX: 0000000000000000 RSI: 0000001b2ce20018 RDI: 000000000c7c3a95 [ 3318.899339][T20975] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3318.899358][T20975] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 00007f0e44ba0000 [ 3318.899377][T20975] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3318.899396][T20975] ? __sys_socket+0x7c/0x250 [ 3318.899456][T20975] [ 3319.021084][T20984] [ 3319.023477][T20984] CPU: 1 PID: 20984 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3319.033030][T20975] memory: usage 307200kB, limit 307200kB, failcnt 73001 [ 3319.033921][T20984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3319.033944][T20984] Call Trace: [ 3319.033954][T20984] [ 3319.052019][T20975] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3319.054286][T20984] dump_stack_lvl+0x136/0x150 [ 3319.054334][T20984] warn_alloc+0x213/0x360 [ 3319.063290][T20975] Memory cgroup stats for [ 3319.064140][T20984] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3319.077080][T20975] /syz5 [ 3319.077608][T20984] __vmalloc_node_range+0x1021/0x14a0 [ 3319.090495][T20975] : [ 3319.091281][T20984] ? alloc_netdev_mqs+0x9c/0x1250 [ 3319.095577][T20975] anon 102400 [ 3319.095577][T20975] file 356352 [ 3319.095577][T20975] kernel 314114048 [ 3319.095577][T20975] kernel_stack 65536 [ 3319.095577][T20975] pagetables 73728 [ 3319.095577][T20975] sec_pagetables 0 [ 3319.095577][T20975] percpu 5432688 [ 3319.095577][T20975] sock 0 [ 3319.095577][T20975] vmalloc 20480 [ 3319.095577][T20975] shmem 344064 [ 3319.095577][T20975] zswap 0 [ 3319.095577][T20975] zswapped 0 [ 3319.095577][T20975] file_mapped 327680 [ 3319.095577][T20975] file_dirty 12288 [ 3319.095577][T20975] file_writeback 0 [ 3319.095577][T20975] swapcached 0 [ 3319.095577][T20975] anon_thp 0 [ 3319.095577][T20975] file_thp 0 [ 3319.095577][T20975] shmem_thp 0 [ 3319.095577][T20975] inactive_anon 45056 [ 3319.095577][T20975] active_anon 401408 [ 3319.095577][T20975] inactive_file 12288 [ 3319.095577][T20975] active_file 0 [ 3319.095577][T20975] unevictable 0 [ 3319.095577][T20975] slab_reclaimable 14640 [ 3319.095577][T20975] slab_unreclaimable 308476352 [ 3319.095577][T20975] slab 308490992 [ 3319.095577][T20975] workingset_refault_anon 0 [ 3319.095577][T20975] workingset_refault_file 1 [ 3319.095577][T20975] workingset_activate_anon 0 [ 3319.095577][T20975] workingset_activate_file 0 [ 3319.095577][T20975] workingset_restore_anon 0 [ 3319.095577][T20975] workingset_restore_file 0 [ 3319.095577][T20975] workingset_nodereclaim 0 [ 3319.095577][T20975] pgscan 42419 [ 3319.095577][T20975] pgsteal 447 [ 3319.095577][T20975] pgscan_kswapd 0 [ 3319.095577][T20975] pgscan_direct 42419 [ 3319.095577][T20975] pgscan_khugepaged 0 [ 3319.095577][T20975] pgsteal_kswapd 0 [ 3319.095577][T20975] pgsteal_direct 447 [ 3319.095577][T20975] pgsteal_khugepaged 0 [ 3319.095577][T20975] pgfault 411564 [ 3319.095577][T20975] pgmajfault 0 [ 3319.095577][T20975] pgrefill 139613 [ 3319.095577][T20975] pgactivate 41957 [ 3319.095577][T20975] pgdeactivate 0 [ 3319.095577][T20975] pglazyfree 0 [ 3319.095577][T20975] pglazyfreed 0 [ 3319.095577][T20975] zswpin 0 [ 3319.095577][T20975] zswpout 0 [ 3319.098788][T20984] ? delayed_vfree_work+0x70/0x70 [ 3319.098848][T20984] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3319.098903][T20984] ? kvmalloc_node+0x76/0x1a0 [ 3319.098933][T20984] ? rcu_is_watching+0x12/0xb0 [ 3319.098975][T20984] ? alloc_netdev_mqs+0x9c/0x1250 [ 3319.099015][T20984] kvmalloc_node+0x156/0x1a0 [ 3319.099047][T20984] ? alloc_netdev_mqs+0x9c/0x1250 [ 3319.099093][T20984] alloc_netdev_mqs+0x9c/0x1250 [ 3319.296286][T20975] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3319.300489][T20984] ? security_capable+0x93/0xc0 [ 3319.300527][T20984] ? br_netpoll_disable+0x60/0x60 [ 3319.300576][T20984] rtnl_create_link+0xbeb/0xee0 [ 3319.300628][T20984] __rtnl_newlink+0xfd4/0x1840 [ 3319.300689][T20984] ? rtnl_link_unregister+0x250/0x250 [ 3319.305894][T20975] ,cpuset= [ 3319.310294][T20984] ? asm_exc_int3+0x39/0x40 [ 3319.310369][T20984] ? rtnl_newlink+0x4a/0xa0 [ 3319.310424][T20984] rtnl_newlink+0x68/0xa0 [ 3319.310466][T20984] ? __rtnl_newlink+0x1840/0x1840 [ 3319.310511][T20984] rtnetlink_rcv_msg+0x43d/0xd50 [ 3319.310561][T20984] ? rtnl_stats_set+0x4d0/0x4d0 [ 3319.310601][T20984] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3319.310652][T20984] ? exc_int3+0xf/0x80 [ 3319.310690][T20984] netlink_rcv_skb+0x165/0x440 [ 3319.324775][T20975] syz5 [ 3319.327447][T20984] ? rtnl_stats_set+0x4d0/0x4d0 [ 3319.332606][T20975] ,mems_allowed=0-1 [ 3319.337317][T20984] ? netlink_ack+0x1360/0x1360 [ 3319.337391][T20984] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3319.337443][T20984] netlink_unicast+0x547/0x7f0 [ 3319.337491][T20984] ? netlink_attachskb+0x890/0x890 [ 3319.337528][T20984] ? __virt_addr_valid+0x61/0x2e0 [ 3319.337578][T20984] ? __phys_addr_symbol+0x30/0x70 [ 3319.337624][T20984] ? __check_object_size+0x333/0x6e0 [ 3319.337671][T20984] netlink_sendmsg+0x925/0xe30 [ 3319.337721][T20984] ? netlink_unicast+0x7f0/0x7f0 [ 3319.350204][T20975] ,oom_memcg= [ 3319.352747][T20984] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3319.352801][T20984] ? netlink_unicast+0x7f0/0x7f0 [ 3319.362188][T20975] /syz5 [ 3319.364878][T20984] sock_sendmsg+0xde/0x190 [ 3319.391191][T20975] ,task_memcg= [ 3319.393520][T20984] ____sys_sendmsg+0x71c/0x900 [ 3319.393574][T20984] ? copy_msghdr_from_user+0xfc/0x150 [ 3319.409183][T20975] /syz5 [ 3319.409772][T20984] ? kernel_sendmsg+0x50/0x50 [ 3319.415055][T20975] ,task=syz-executor.5,pid=20975,uid=0 [ 3319.419866][T20984] ? futex_unqueue+0xb7/0x120 [ 3319.419921][T20984] ? futex_wait+0x503/0x680 [ 3319.419974][T20984] ___sys_sendmsg+0x110/0x1b0 [ 3319.420022][T20984] ? do_recvmmsg+0x6e0/0x6e0 [ 3319.420083][T20984] ? __fget_files+0x248/0x480 [ 3319.420136][T20984] ? lock_downgrade+0x690/0x690 [ 3319.420188][T20984] ? __fget_files+0x26a/0x480 [ 3319.435120][T20975] Memory cgroup out of memory: Killed process 20975 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3319.440186][T20984] ? __fget_light+0xe5/0x270 [ 3319.440256][T20984] __sys_sendmsg+0xf7/0x1c0 [ 3319.440307][T20984] ? __sys_sendmsg_sock+0x40/0x40 [ 3319.440357][T20984] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3319.455355][T20978] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3319.455488][T20984] ? syscall_enter_from_user_mode+0x26/0x80 [ 3319.591618][T20984] ? lockdep_hardirqs_on+0x7d/0x100 [ 3319.596898][T20984] do_syscall_64+0x39/0xb0 [ 3319.601405][T20984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3319.607377][T20984] RIP: 0033:0x7f79ea88c169 [ 3319.611866][T20984] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3319.631629][T20984] RSP: 002b:00007f79eb505168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3319.640114][T20984] RAX: ffffffffffffffda RBX: 00007f79ea9abf80 RCX: 00007f79ea88c169 [ 3319.648144][T20984] RDX: c753030000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3319.656408][T20984] RBP: 00007f79ea8e7ca1 R08: 0000000000000000 R09: 0000000000000000 08:18:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd04b0300) [ 3319.664444][T20984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3319.672478][T20984] R13: 00007ffd939e5d3f R14: 00007f79eb505300 R15: 0000000000022000 [ 3319.680549][T20984] [ 3319.690066][T20978] CPU: 0 PID: 20978 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3319.692874][T20984] Mem-Info: [ 3319.700537][T20978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3319.700562][T20978] Call Trace: [ 3319.700573][T20978] [ 3319.700586][T20978] dump_stack_lvl+0x136/0x150 [ 3319.700626][T20978] dump_header+0x10a/0xd70 [ 3319.700668][T20978] oom_kill_process+0x25d/0x600 [ 3319.700711][T20978] out_of_memory+0x35c/0x1660 [ 3319.700759][T20978] ? oom_killer_disable+0x2b0/0x2b0 [ 3319.700798][T20978] ? rcu_read_unlock+0x9/0x60 [ 3319.700837][T20978] ? find_held_lock+0x2d/0x110 [ 3319.700899][T20978] mem_cgroup_out_of_memory+0x206/0x270 [ 3319.700947][T20978] ? mem_cgroup_margin+0x130/0x130 [ 3319.704343][T20984] active_anon:82288 inactive_anon:1240 isolated_anon:0 [ 3319.704343][T20984] active_file:7 inactive_file:15600 isolated_file:0 [ 3319.704343][T20984] unevictable:768 dirty:32 writeback:0 [ 3319.704343][T20984] slab_reclaimable:30901 slab_unreclaimable:953927 [ 3319.704343][T20984] mapped:19747 shmem:2068 pagetables:682 [ 3319.704343][T20984] sec_pagetables:0 bounce:0 [ 3319.704343][T20984] kernel_misc_reclaimable:0 [ 3319.704343][T20984] free:451841 free_pcp:15080 free_cma:0 [ 3319.714110][T20978] ? lock_downgrade+0x690/0x690 [ 3319.714175][T20978] try_charge_memcg+0xf9b/0x13b0 [ 3319.714218][T20978] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3319.717630][T20984] Node 0 active_anon:328748kB inactive_anon:4424kB active_file:4kB inactive_file:57544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 3319.720434][T20978] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3319.720488][T20978] ? lock_downgrade+0x690/0x690 [ 3319.725256][T20984] Node 1 active_anon:404kB inactive_anon:536kB active_file:24kB inactive_file:4856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:76kB writeback:0kB shmem:1840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:536kB pagetables:380kB sec_pagetables:0kB all_unreclaimable? no [ 3319.729570][T20978] ? lock_downgrade+0x690/0x690 [ 3319.729626][T20978] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3319.734586][T20984] Node 0 [ 3319.739160][T20978] __alloc_pages+0x1f3/0x4a0 [ 3319.739198][T20978] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3319.739236][T20978] ? print_usage_bug.part.0+0x660/0x660 [ 3319.739278][T20978] ? find_held_lock+0x2d/0x110 [ 3319.739338][T20978] alloc_pages+0x1aa/0x270 [ 3319.739390][T20978] pte_alloc_one+0x1a/0x230 [ 3319.739436][T20978] __pte_alloc+0x6d/0x260 [ 3319.744735][T20984] DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 3319.749300][T20978] ? pmd_install+0x160/0x160 [ 3319.749338][T20978] ? _raw_spin_unlock+0x28/0x40 [ 3319.749382][T20978] ? __pmd_alloc+0x30c/0x5d0 [ 3319.754314][T20984] lowmem_reserve[]: [ 3319.759853][T20978] __handle_mm_fault+0x3626/0x3e60 [ 3319.759912][T20978] ? vm_iomap_memory+0x190/0x190 [ 3319.768037][T20984] 0 [ 3319.810190][T20978] handle_mm_fault+0x2ba/0x9c0 [ 3319.810247][T20978] do_user_addr_fault+0x475/0x1230 [ 3319.815243][T20984] 2617 [ 3319.820056][T20978] ? rcu_is_watching+0x12/0xb0 [ 3319.820104][T20978] exc_page_fault+0x98/0x170 [ 3319.820146][T20978] asm_exc_page_fault+0x26/0x30 [ 3319.820183][T20978] RIP: 0033:0x7fb9a042bde9 [ 3319.820209][T20978] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3319.820237][T20978] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 [ 3319.820261][T20978] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3319.820280][T20978] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3319.820300][T20978] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3319.820319][T20978] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 0000000000329c73 [ 3319.820339][T20978] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3319.820379][T20978] [ 3319.956264][T20978] memory: usage 307184kB, limit 307200kB, failcnt 79175 [ 3320.010189][T20984] 2619 [ 3320.014760][T20978] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.017745][T20984] 2619 [ 3320.029740][T20978] Memory cgroup stats for [ 3320.044450][T20984] 2619 [ 3320.084565][T20978] /syz0 [ 3320.088080][T20984] [ 3320.105623][T20978] : [ 3320.114922][T20984] Node 0 [ 3320.133625][T20978] anon 131072 [ 3320.133625][T20978] file 356352 [ 3320.133625][T20978] kernel 314068992 [ 3320.133625][T20978] kernel_stack 65536 [ 3320.133625][T20978] pagetables 77824 [ 3320.133625][T20978] sec_pagetables 0 [ 3320.133625][T20978] percpu 5432256 [ 3320.133625][T20978] sock 0 [ 3320.133625][T20978] vmalloc 0 [ 3320.133625][T20978] shmem 344064 [ 3320.133625][T20978] zswap 0 [ 3320.133625][T20978] zswapped 0 [ 3320.133625][T20978] file_mapped 327680 [ 3320.133625][T20978] file_dirty 12288 [ 3320.133625][T20978] file_writeback 0 [ 3320.133625][T20978] swapcached 0 [ 3320.133625][T20978] anon_thp 0 [ 3320.133625][T20978] file_thp 0 [ 3320.133625][T20978] shmem_thp 0 [ 3320.133625][T20978] inactive_anon 61440 [ 3320.133625][T20978] active_anon 413696 [ 3320.133625][T20978] inactive_file 12288 [ 3320.133625][T20978] active_file 0 [ 3320.133625][T20978] unevictable 0 [ 3320.133625][T20978] slab_reclaimable 18728 [ 3320.133625][T20978] slab_unreclaimable 308446576 [ 3320.133625][T20978] slab 308465304 [ 3320.133625][T20978] workingset_refault_anon 0 [ 3320.133625][T20978] workingset_refault_file 4 [ 3320.133625][T20978] workingset_activate_anon 0 [ 3320.133625][T20978] workingset_activate_file 0 [ 3320.133625][T20978] workingset_restore_anon 0 [ 3320.133625][T20978] workingset_restore_file 1 [ 3320.133625][T20978] workingset_nodereclaim 0 [ 3320.133625][T20978] pgscan 60446 [ 3320.133625][T20978] pgsteal 555 [ 3320.133625][T20978] pgscan_kswapd 0 [ 3320.133625][T20978] pgscan_direct 60446 [ 3320.133625][T20978] pgscan_khugepaged 0 [ 3320.133625][T20978] pgsteal_kswapd 0 [ 3320.133625][T20978] pgsteal_direct 555 [ 3320.133625][T20978] pgsteal_khugepaged 0 [ 3320.133625][T20978] pgfault 436018 [ 3320.133625][T20978] pgmajfault 2 [ 3320.133625][T20978] pgrefill 196264 [ 3320.133625][T20978] pgactivate 59794 [ 3320.133625][T20978] pgdeactivate 0 [ 3320.133625][T20978] pglazyfree 0 [ 3320.133625][T20978] pglazyfreed 0 [ 3320.133625][T20978] zswpin 0 [ 3320.133625][T20978] zswpout 0 [ 3320.135531][T20984] DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:328708kB inactive_anon:4420kB active_file:8kB inactive_file:55964kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:38084kB local_pcp:19996kB free_cma:0kB [ 3320.159237][T20978] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3320.339875][T20984] lowmem_reserve[]: 0 0 1 1 1 [ 3320.390342][T20978] ,cpuset= [ 3320.391484][T20984] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3320.391589][T20984] lowmem_reserve[]: [ 3320.394836][T20978] syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20978,uid=0 [ 3320.435025][T20984] 0 0 0 0 0 [ 3320.441342][T20984] Node 1 Normal free:1752444kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:400kB inactive_anon:580kB active_file:20kB inactive_file:4860kB unevictable:1536kB writepending:76kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:22400kB local_pcp:18648kB free_cma:0kB [ 3320.445005][T20978] Memory cgroup out of memory: Killed process 20978 (syz-executor.0) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3320.495346][T20984] lowmem_reserve[]: 0 0 0 0 0 08:18:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x2c) (rerun: 32) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newlinkprop={0x34, 0x6c, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x810}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8, 0x1b, 0x33}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4020) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c5c1000000000000018320203a3b83404a80d3d7e473b508502fbf7fdb44d8840c2ff16d4f049307338d6d202", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) [ 3320.509963][T20984] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3320.514251][T20979] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3320.544804][T20979] CPU: 1 PID: 20979 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3320.555313][T20979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3320.565428][T20979] Call Trace: [ 3320.568754][T20979] [ 3320.571730][T20979] dump_stack_lvl+0x136/0x150 [ 3320.576474][T20979] dump_header+0x10a/0xd70 [ 3320.580966][T20979] oom_kill_process+0x25d/0x600 [ 3320.585899][T20979] out_of_memory+0x35c/0x1660 [ 3320.590660][T20979] ? oom_killer_disable+0x2b0/0x2b0 [ 3320.595931][T20979] ? rcu_read_unlock+0x9/0x60 [ 3320.600686][T20979] ? find_held_lock+0x2d/0x110 [ 3320.605538][T20979] mem_cgroup_out_of_memory+0x206/0x270 [ 3320.611160][T20979] ? mem_cgroup_margin+0x130/0x130 [ 3320.616320][T20979] ? lock_downgrade+0x690/0x690 [ 3320.621229][T20979] try_charge_memcg+0xf9b/0x13b0 [ 3320.626206][T20979] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3320.632216][T20979] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3320.637987][T20979] ? lock_downgrade+0x690/0x690 [ 3320.642879][T20979] ? lock_downgrade+0x690/0x690 [ 3320.647780][T20979] obj_cgroup_charge+0x2af/0x5e0 [ 3320.652753][T20979] ? __anon_vma_prepare+0x64/0x580 [ 3320.657899][T20979] kmem_cache_alloc+0xb1/0x3b0 [ 3320.662718][T20979] __anon_vma_prepare+0x64/0x580 [ 3320.667699][T20979] ? __pmd_alloc+0x30c/0x5d0 [ 3320.672368][T20979] __handle_mm_fault+0x3a8f/0x3e60 [ 3320.677530][T20979] ? vm_iomap_memory+0x190/0x190 [ 3320.682540][T20979] handle_mm_fault+0x2ba/0x9c0 [ 3320.687359][T20979] do_user_addr_fault+0x475/0x1230 [ 3320.692521][T20979] ? rcu_is_watching+0x12/0xb0 [ 3320.697331][T20979] exc_page_fault+0x98/0x170 [ 3320.701966][T20979] asm_exc_page_fault+0x26/0x30 [ 3320.706873][T20979] RIP: 0033:0x7faa0ba2bde9 [ 3320.711356][T20979] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3320.731124][T20979] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3320.737223][T20979] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3320.745230][T20979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3320.753227][T20979] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3320.761236][T20979] R10: 00007faa0b600068 R11: 0000000000000246 R12: 0000000000329c79 08:18:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf8580300) [ 3320.769252][T20979] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3320.777291][T20979] [ 3320.783798][T20979] memory: usage 307184kB, limit 307200kB, failcnt 93228 [ 3320.805086][T20984] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) 24*128kB (UME) 14*256kB (UME) 6*512kB (UM) 10*1024kB (UM) 6*2048kB (M) 0*4096kB = 44180kB [ 3320.825925][T20979] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3320.834783][T20979] Memory cgroup stats for /syz1: [ 3320.835055][T20979] anon 126976 [ 3320.835055][T20979] file 352256 [ 3320.835055][T20979] kernel 314077184 [ 3320.835055][T20979] kernel_stack 65536 [ 3320.835055][T20979] pagetables 81920 [ 3320.835055][T20979] sec_pagetables 0 [ 3320.835055][T20979] percpu 5423968 [ 3320.835055][T20979] sock 0 [ 3320.835055][T20979] vmalloc 16384 [ 3320.835055][T20979] shmem 339968 [ 3320.835055][T20979] zswap 0 [ 3320.835055][T20979] zswapped 0 [ 3320.835055][T20979] file_mapped 262144 [ 3320.835055][T20979] file_dirty 12288 [ 3320.835055][T20979] file_writeback 0 [ 3320.835055][T20979] swapcached 0 [ 3320.835055][T20979] anon_thp 0 [ 3320.835055][T20979] file_thp 0 [ 3320.835055][T20979] shmem_thp 0 [ 3320.835055][T20979] inactive_anon 57344 [ 3320.835055][T20979] active_anon 409600 [ 3320.835055][T20979] inactive_file 12288 [ 3320.835055][T20979] active_file 0 [ 3320.835055][T20979] unevictable 0 [ 3320.835055][T20979] slab_reclaimable 245368 [ 3320.835055][T20979] slab_unreclaimable 308217856 [ 3320.835055][T20979] slab 308463224 [ 3320.835055][T20979] workingset_refault_anon 0 [ 3320.835055][T20979] workingset_refault_file 4 [ 3320.835055][T20979] workingset_activate_anon 0 [ 3320.835055][T20979] workingset_activate_file 0 [ 3320.835055][T20979] workingset_restore_anon 0 [ 3320.835055][T20979] workingset_restore_file 2 [ 3320.835055][T20979] workingset_nodereclaim 0 [ 3320.835055][T20979] pgscan 78391 [ 3320.835055][T20979] pgsteal 593 [ 3320.835055][T20979] pgscan_kswapd 0 [ 3320.835055][T20979] pgscan_direct 78391 [ 3320.835055][T20979] pgscan_khugepaged 0 [ 3320.835055][T20979] pgsteal_kswapd 0 [ 3320.835055][T20979] pgsteal_direct 593 [ 3320.835055][T20979] pgsteal_khugepaged 0 [ 3320.835055][T20979] pgfault 409295 [ 3320.835055][T20979] pgmajfault 0 [ 3320.835055][T20979] pgrefill 212650 [ 3320.835055][T20979] pgactivate 77705 [ 3320.835055][T20979] pgdeactivate 0 [ 3320.835055][T20979] pglazyfree 0 [ 3320.835055][T20979] pglazyfreed 0 [ 3320.835055][T20979] zswpin 0 [ 3320.835055][T20979] zswpout 0 08:18:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffff030000000000) [ 3320.906609][T20984] Node 0 [ 3321.031415][T20979] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20979,uid=0 [ 3321.050797][T20979] Memory cgroup out of memory: Killed process 20979 (syz-executor.1) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3321.126879][T20989] syz-executor.0 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3321.165718][T20989] CPU: 0 PID: 20989 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3321.176231][T20989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3321.186346][T20989] Call Trace: [ 3321.188112][T20984] Normal: [ 3321.189643][T20989] [ 3321.189659][T20989] dump_stack_lvl+0x136/0x150 [ 3321.189702][T20989] dump_header+0x10a/0xd70 [ 3321.192912][T20984] 1*4kB [ 3321.195691][T20989] oom_kill_process+0x25d/0x600 [ 3321.195737][T20989] out_of_memory+0x35c/0x1660 [ 3321.195780][T20989] ? find_held_lock+0x2d/0x110 [ 3321.203609][T20984] (M) [ 3321.204900][T20989] ? oom_killer_disable+0x2b0/0x2b0 [ 3321.204950][T20989] ? rcu_read_unlock+0x9/0x60 [ 3321.208123][T20984] 0*8kB [ 3321.212757][T20989] ? find_held_lock+0x2d/0x110 [ 3321.212819][T20989] mem_cgroup_out_of_memory+0x206/0x270 [ 3321.225983][T20984] 1*16kB [ 3321.230162][T20989] ? mem_cgroup_margin+0x130/0x130 [ 3321.230213][T20989] ? lock_downgrade+0x690/0x690 [ 3321.230278][T20989] try_charge_memcg+0xf9b/0x13b0 [ 3321.235238][T20984] (M) [ 3321.237928][T20989] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3321.237967][T20989] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3321.238015][T20989] ? lock_downgrade+0x690/0x690 [ 3321.242947][T20984] 0*32kB [ 3321.248336][T20989] ? lock_downgrade+0x690/0x690 [ 3321.248394][T20989] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3321.248433][T20989] __alloc_pages+0x1f3/0x4a0 [ 3321.251557][T20984] 0*64kB [ 3321.256492][T20989] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3321.256543][T20989] ? __lock_acquire+0xbc5/0x5d40 [ 3321.256596][T20989] alloc_pages+0x1aa/0x270 [ 3321.261671][T20984] 0*128kB [ 3321.266415][T20989] __pmd_alloc+0x3f/0x5d0 [ 3321.266465][T20989] __handle_mm_fault+0x932/0x3e60 [ 3321.281711][T20984] 0*256kB [ 3321.285756][T20989] ? vm_iomap_memory+0x190/0x190 [ 3321.285835][T20989] handle_mm_fault+0x2ba/0x9c0 [ 3321.288984][T20984] 0*512kB [ 3321.293615][T20989] do_user_addr_fault+0x475/0x1230 [ 3321.293667][T20989] ? rcu_is_watching+0x12/0xb0 [ 3321.299398][T20984] 0*1024kB [ 3321.303800][T20989] exc_page_fault+0x98/0x170 [ 3321.303847][T20989] asm_exc_page_fault+0x26/0x30 [ 3321.303887][T20989] RIP: 0033:0x7fb9a042bde9 [ 3321.303911][T20989] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3321.303942][T20989] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 [ 3321.303970][T20989] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3321.303989][T20989] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3321.304007][T20989] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3321.304026][T20989] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 000000000032a5f3 [ 3321.304045][T20989] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3321.304086][T20989] [ 3321.373182][T20989] memory: usage 307200kB, limit 307200kB, failcnt 79272 [ 3321.384026][T20984] 0*2048kB [ 3321.412496][T20989] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3321.419516][T20984] 0*4096kB [ 3321.459095][T20989] Memory cgroup stats for 08:18:47 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc803000000000000) [ 3321.469032][T20984] = 20kB [ 3321.469057][T20984] Node 1 Normal: 1*4kB (E) 195*8kB (UM) 360*16kB (UME) 96*32kB (UME) 169*64kB (UME) 112*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1751772kB [ 3321.469358][T20984] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.469393][T20984] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3321.469423][T20984] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3321.469448][T20984] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3321.469474][T20984] 17685 total pagecache pages [ 3321.469486][T20984] 0 pages in swap cache [ 3321.469496][T20984] Free swap = 0kB [ 3321.469506][T20984] Total swap = 0kB [ 3321.469527][T20984] 2097051 pages RAM [ 3321.469538][T20984] 0 pages HighMem/MovableOnly [ 3321.469548][T20984] 392115 pages reserved [ 3321.469562][T20984] 0 pages cma reserved [ 3321.573786][T20989] /syz0: [ 3321.574048][T20989] anon 131072 [ 3321.574048][T20989] file 360448 [ 3321.574048][T20989] kernel 314081280 [ 3321.574048][T20989] kernel_stack 65536 [ 3321.574048][T20989] pagetables 73728 [ 3321.574048][T20989] sec_pagetables 0 [ 3321.574048][T20989] percpu 5432320 [ 3321.574048][T20989] sock 0 [ 3321.574048][T20989] vmalloc 0 [ 3321.574048][T20989] shmem 344064 [ 3321.574048][T20989] zswap 0 [ 3321.574048][T20989] zswapped 0 [ 3321.574048][T20989] file_mapped 327680 [ 3321.574048][T20989] file_dirty 16384 [ 3321.574048][T20989] file_writeback 0 [ 3321.574048][T20989] swapcached 0 [ 3321.574048][T20989] anon_thp 0 [ 3321.574048][T20989] file_thp 0 [ 3321.574048][T20989] shmem_thp 0 [ 3321.574048][T20989] inactive_anon 65536 [ 3321.574048][T20989] active_anon 409600 [ 3321.574048][T20989] inactive_file 0 [ 3321.574048][T20989] active_file 16384 [ 3321.574048][T20989] unevictable 0 [ 3321.574048][T20989] slab_reclaimable 18968 [ 3321.574048][T20989] slab_unreclaimable 308458488 [ 3321.574048][T20989] slab 308477456 [ 3321.574048][T20989] workingset_refault_anon 0 [ 3321.574048][T20989] workingset_refault_file 4 [ 3321.574048][T20989] workingset_activate_anon 0 [ 3321.574048][T20989] workingset_activate_file 0 [ 3321.574048][T20989] workingset_restore_anon 0 [ 3321.574048][T20989] workingset_restore_file 1 [ 3321.574048][T20989] workingset_nodereclaim 0 [ 3321.574048][T20989] pgscan 60497 [ 3321.574048][T20989] pgsteal 555 [ 3321.574048][T20989] pgscan_kswapd 0 [ 3321.574048][T20989] pgscan_direct 60497 [ 3321.574048][T20989] pgscan_khugepaged 0 [ 3321.574048][T20989] pgsteal_kswapd 0 [ 3321.574048][T20989] pgsteal_direct 555 [ 3321.574048][T20989] pgsteal_khugepaged 0 [ 3321.574048][T20989] pgfault 436078 [ 3321.574048][T20989] pgmajfault 2 [ 3321.574048][T20989] pgrefill 196591 [ 3321.574048][T20989] pgactivate 59845 [ 3321.574048][T20989] pgdeactivate 0 [ 3321.574048][T20989] pglazyfree 0 [ 3321.574048][T20989] pglazyfreed 0 [ 3321.574048][T20989] zswpin 0 [ 3321.574048][T20989] zswpout 0 [ 3321.764593][T20989] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=20989,uid=0 [ 3321.781461][T20989] Memory cgroup out of memory: Killed process 20989 (syz-executor.0) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3321.802001][T20985] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:18:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf9580300) [ 3321.824947][T20985] CPU: 0 PID: 20985 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3321.835459][T20985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3321.845571][T20985] Call Trace: [ 3321.848903][T20985] [ 3321.851886][T20985] dump_stack_lvl+0x136/0x150 [ 3321.856725][T20985] dump_header+0x10a/0xd70 [ 3321.861229][T20985] oom_kill_process+0x25d/0x600 [ 3321.866162][T20985] out_of_memory+0x35c/0x1660 [ 3321.870922][T20985] ? oom_killer_disable+0x2b0/0x2b0 [ 3321.876206][T20985] ? rcu_read_unlock+0x9/0x60 [ 3321.880954][T20985] ? find_held_lock+0x2d/0x110 [ 3321.885897][T20985] mem_cgroup_out_of_memory+0x206/0x270 [ 3321.891536][T20985] ? mem_cgroup_margin+0x130/0x130 [ 3321.896724][T20985] ? lock_downgrade+0x690/0x690 [ 3321.901667][T20985] try_charge_memcg+0xf9b/0x13b0 [ 3321.906681][T20985] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3321.912736][T20985] ? rcu_read_unlock+0x9/0x60 [ 3321.917498][T20985] ? lock_downgrade+0x690/0x690 [ 3321.922532][T20985] charge_memcg+0x90/0x3b0 [ 3321.927013][T20985] __mem_cgroup_charge+0x2b/0x90 [ 3321.932011][T20985] do_wp_page+0x8eb/0x3520 [ 3321.936470][T20985] ? lock_release+0x670/0x670 [ 3321.941179][T20985] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3321.946614][T20985] ? do_raw_spin_lock+0x124/0x2b0 [ 3321.951685][T20985] ? spin_bug+0x1c0/0x1c0 [ 3321.956064][T20985] ? lock_downgrade+0x690/0x690 [ 3321.960968][T20985] __handle_mm_fault+0x19a1/0x3e60 [ 3321.966180][T20985] ? vm_iomap_memory+0x190/0x190 [ 3321.971185][T20985] handle_mm_fault+0x2ba/0x9c0 [ 3321.975998][T20985] do_user_addr_fault+0x475/0x1230 [ 3321.981156][T20985] ? rcu_is_watching+0x12/0xb0 [ 3321.985962][T20985] exc_page_fault+0x98/0x170 [ 3321.990604][T20985] asm_exc_page_fault+0x26/0x30 [ 3321.995493][T20985] RIP: 0033:0x7f9ac6239610 [ 3322.000110][T20985] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3322.019934][T20985] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3322.026057][T20985] RAX: 00000000889da1a8 RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3322.034147][T20985] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000a21e666 [ 3322.042238][T20985] RBP: 00000000889da1a8 R08: 00000000000001a8 R09: 00000000889da1ac [ 3322.050280][T20985] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3322.058361][T20985] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff83d3eb42 [ 3322.066365][T20985] ? apparmor_socket_create+0x22/0x670 [ 3322.072032][T20985] [ 3322.088447][T20985] memory: usage 307200kB, limit 307200kB, failcnt 70147 [ 3322.095653][T20985] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3322.102736][T20985] Memory cgroup stats for /syz2: [ 3322.102951][T20985] anon 118784 [ 3322.102951][T20985] file 360448 [ 3322.102951][T20985] kernel 314060800 [ 3322.102951][T20985] kernel_stack 32768 [ 3322.102951][T20985] pagetables 69632 [ 3322.102951][T20985] sec_pagetables 0 [ 3322.102951][T20985] percpu 5428704 [ 3322.102951][T20985] sock 0 [ 3322.102951][T20985] vmalloc 0 [ 3322.102951][T20985] shmem 348160 [ 3322.102951][T20985] zswap 0 [ 3322.102951][T20985] zswapped 0 [ 3322.102951][T20985] file_mapped 311296 [ 3322.102951][T20985] file_dirty 12288 [ 3322.102951][T20985] file_writeback 0 [ 3322.102951][T20985] swapcached 0 [ 3322.102951][T20985] anon_thp 0 [ 3322.102951][T20985] file_thp 0 [ 3322.102951][T20985] shmem_thp 0 [ 3322.102951][T20985] inactive_anon 61440 [ 3322.102951][T20985] active_anon 405504 [ 3322.102951][T20985] inactive_file 8192 [ 3322.102951][T20985] active_file 4096 [ 3322.102951][T20985] unevictable 0 [ 3322.102951][T20985] slab_reclaimable 217912 [ 3322.102951][T20985] slab_unreclaimable 308286168 [ 3322.102951][T20985] slab 308504080 [ 3322.102951][T20985] workingset_refault_anon 0 [ 3322.102951][T20985] workingset_refault_file 0 [ 3322.102951][T20985] workingset_activate_anon 0 [ 3322.102951][T20985] workingset_activate_file 0 [ 3322.102951][T20985] workingset_restore_anon 0 [ 3322.102951][T20985] workingset_restore_file 0 [ 3322.102951][T20985] workingset_nodereclaim 0 [ 3322.102951][T20985] pgscan 54264 [ 3322.102951][T20985] pgsteal 457 [ 3322.102951][T20985] pgscan_kswapd 0 [ 3322.102951][T20985] pgscan_direct 54264 [ 3322.102951][T20985] pgscan_khugepaged 0 [ 3322.102951][T20985] pgsteal_kswapd 0 [ 3322.102951][T20985] pgsteal_direct 457 [ 3322.102951][T20985] pgsteal_khugepaged 0 [ 3322.102951][T20985] pgfault 421195 [ 3322.102951][T20985] pgmajfault 1 [ 3322.102951][T20985] pgrefill 180412 [ 3322.102951][T20985] pgactivate 53768 [ 3322.102951][T20985] pgdeactivate 0 [ 3322.102951][T20985] pglazyfree 0 [ 3322.102951][T20985] pglazyfreed 0 [ 3322.102951][T20985] zswpin 0 [ 3322.102951][T20985] zswpout 0 [ 3322.293998][T20985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20985,uid=0 [ 3322.311325][T20985] Memory cgroup out of memory: Killed process 20985 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3322.333488][T20988] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3322.353023][T20988] CPU: 0 PID: 20988 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3322.363570][T20988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3322.373843][T20988] Call Trace: [ 3322.377174][T20988] [ 3322.380128][T20988] dump_stack_lvl+0x136/0x150 [ 3322.384881][T20988] dump_header+0x10a/0xd70 [ 3322.389374][T20988] oom_kill_process+0x25d/0x600 [ 3322.394454][T20988] out_of_memory+0x35c/0x1660 [ 3322.399288][T20988] ? oom_killer_disable+0x2b0/0x2b0 [ 3322.404549][T20988] ? rcu_read_unlock+0x9/0x60 [ 3322.409372][T20988] ? find_held_lock+0x2d/0x110 [ 3322.414232][T20988] mem_cgroup_out_of_memory+0x206/0x270 [ 3322.419820][T20988] ? mem_cgroup_margin+0x130/0x130 [ 3322.425049][T20988] ? lock_downgrade+0x690/0x690 [ 3322.429979][T20988] try_charge_memcg+0xf9b/0x13b0 [ 3322.434985][T20988] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3322.440999][T20988] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3322.446871][T20988] ? lock_downgrade+0x690/0x690 [ 3322.451786][T20988] ? lock_downgrade+0x690/0x690 [ 3322.456677][T20988] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3322.462261][T20988] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3322.468448][T20988] copy_process+0x13a7/0x7590 [ 3322.473169][T20988] ? __lock_acquire+0xbc5/0x5d40 [ 3322.478158][T20988] ? __cleanup_sighand+0xb0/0xb0 [ 3322.483127][T20988] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3322.489161][T20988] ? psi_memstall_leave+0x174/0x250 [ 3322.494447][T20988] ? lock_downgrade+0x690/0x690 [ 3322.499334][T20988] kernel_clone+0xeb/0x890 [ 3322.503801][T20988] ? create_io_thread+0xf0/0xf0 [ 3322.508689][T20988] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3322.514974][T20988] ? lock_downgrade+0x690/0x690 [ 3322.519885][T20988] __do_sys_clone+0xba/0x100 [ 3322.524531][T20988] ? kernel_clone+0x890/0x890 [ 3322.529274][T20988] ? syscall_enter_from_user_mode+0x26/0x80 [ 3322.535214][T20988] do_syscall_64+0x39/0xb0 [ 3322.539697][T20988] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3322.545631][T20988] RIP: 0033:0x7f461ea8d591 [ 3322.550088][T20988] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3322.569832][T20988] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3322.578273][T20988] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3322.586282][T20988] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3322.594538][T20988] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 08:18:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd14b0300) 08:18:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x3f510300) [ 3322.602551][T20988] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3322.610668][T20988] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3322.618821][T20988] [ 3322.638967][T20988] memory: usage 307200kB, limit 307200kB, failcnt 80909 [ 3322.660389][T20988] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3322.677262][T20988] Memory cgroup stats for /syz3: [ 3322.677569][T20988] anon 86016 [ 3322.677569][T20988] file 364544 [ 3322.677569][T20988] kernel 314122240 [ 3322.677569][T20988] kernel_stack 32768 [ 3322.677569][T20988] pagetables 69632 [ 3322.677569][T20988] sec_pagetables 0 [ 3322.677569][T20988] percpu 5432256 [ 3322.677569][T20988] sock 0 [ 3322.677569][T20988] vmalloc 8192 [ 3322.677569][T20988] shmem 339968 [ 3322.677569][T20988] zswap 0 [ 3322.677569][T20988] zswapped 0 [ 3322.677569][T20988] file_mapped 327680 [ 3322.677569][T20988] file_dirty 20480 [ 3322.677569][T20988] file_writeback 0 [ 3322.677569][T20988] swapcached 0 [ 3322.677569][T20988] anon_thp 0 [ 3322.677569][T20988] file_thp 0 [ 3322.677569][T20988] shmem_thp 0 [ 3322.677569][T20988] inactive_anon 40960 [ 3322.677569][T20988] active_anon 385024 [ 3322.677569][T20988] inactive_file 0 [ 3322.677569][T20988] active_file 24576 [ 3322.677569][T20988] unevictable 0 [ 3322.677569][T20988] slab_reclaimable 37184 [ 3322.677569][T20988] slab_unreclaimable 308482240 [ 3322.677569][T20988] slab 308519424 [ 3322.677569][T20988] workingset_refault_anon 0 [ 3322.677569][T20988] workingset_refault_file 2 [ 3322.677569][T20988] workingset_activate_anon 0 [ 3322.677569][T20988] workingset_activate_file 0 [ 3322.677569][T20988] workingset_restore_anon 0 [ 3322.677569][T20988] workingset_restore_file 0 [ 3322.677569][T20988] workingset_nodereclaim 0 [ 3322.677569][T20988] pgscan 55094 [ 3322.677569][T20988] pgsteal 450 [ 3322.677569][T20988] pgscan_kswapd 0 [ 3322.677569][T20988] pgscan_direct 55094 [ 3322.677569][T20988] pgscan_khugepaged 0 [ 3322.677569][T20988] pgsteal_kswapd 0 [ 3322.677569][T20988] pgsteal_direct 450 [ 3322.677569][T20988] pgsteal_khugepaged 0 [ 3322.677569][T20988] pgfault 415680 [ 3322.677569][T20988] pgmajfault 1 [ 3322.677569][T20988] pgrefill 204143 [ 3322.677569][T20988] pgactivate 54635 [ 3322.677569][T20988] pgdeactivate 0 [ 3322.677569][T20988] pglazyfree 0 [ 3322.677569][T20988] pglazyfreed 0 [ 3322.677569][T20988] zswpin 0 [ 3322.677569][T20988] zswpout 0 [ 3322.874398][T20988] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=20988,uid=0 [ 3322.890605][T20988] Memory cgroup out of memory: Killed process 20988 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@newlinkprop={0x34, 0x6c, 0x10, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x8, 0x810}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}]}, @IFLA_GROUP={0x8, 0x1b, 0x33}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004014}, 0x4020) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c5c1000000000000018320203a3b83404a80d3d7e473b508502fbf7fdb44d8840c2ff16d4f049307338d6d202", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d0000000000"], 0x3c}}, 0x0) [ 3322.995125][T20992] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3323.026316][T20992] CPU: 1 PID: 20992 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3323.036823][T20992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3323.046927][T20992] Call Trace: [ 3323.050250][T20992] [ 3323.053253][T20992] dump_stack_lvl+0x136/0x150 [ 3323.058002][T20992] dump_header+0x10a/0xd70 [ 3323.062510][T20992] oom_kill_process+0x25d/0x600 [ 3323.067432][T20992] out_of_memory+0x35c/0x1660 [ 3323.072191][T20992] ? find_held_lock+0x2d/0x110 [ 3323.077482][T20992] ? oom_killer_disable+0x2b0/0x2b0 [ 3323.082756][T20992] ? rcu_read_unlock+0x9/0x60 [ 3323.087502][T20992] ? find_held_lock+0x2d/0x110 [ 3323.092358][T20992] mem_cgroup_out_of_memory+0x206/0x270 [ 3323.098058][T20992] ? mem_cgroup_margin+0x130/0x130 [ 3323.103228][T20992] ? lock_downgrade+0x690/0x690 [ 3323.108129][T20992] try_charge_memcg+0xf9b/0x13b0 [ 3323.113221][T20992] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3323.119232][T20992] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3323.124999][T20992] ? lock_downgrade+0x690/0x690 [ 3323.129894][T20992] ? lock_downgrade+0x690/0x690 [ 3323.134797][T20992] obj_cgroup_charge+0x2af/0x5e0 [ 3323.139770][T20992] ? __anon_vma_prepare+0x64/0x580 [ 3323.144924][T20992] kmem_cache_alloc+0xb1/0x3b0 [ 3323.149748][T20992] __anon_vma_prepare+0x64/0x580 [ 3323.154724][T20992] ? __pmd_alloc+0x30c/0x5d0 [ 3323.159356][T20992] __handle_mm_fault+0x3a8f/0x3e60 [ 3323.164517][T20992] ? vm_iomap_memory+0x190/0x190 [ 3323.169533][T20992] handle_mm_fault+0x2ba/0x9c0 [ 3323.174338][T20992] do_user_addr_fault+0x475/0x1230 [ 3323.179499][T20992] ? rcu_is_watching+0x12/0xb0 [ 3323.184327][T20992] exc_page_fault+0x98/0x170 [ 3323.188961][T20992] asm_exc_page_fault+0x26/0x30 [ 3323.193854][T20992] RIP: 0033:0x7faa0ba2bde9 [ 3323.198416][T20992] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3323.218143][T20992] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3323.224241][T20992] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3323.232235][T20992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3323.240235][T20992] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3323.248228][T20992] R10: 00007faa0b600068 R11: 0000000000000246 R12: 000000000032a6ff [ 3323.256242][T20992] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3323.264261][T20992] [ 3323.281807][T20992] memory: usage 307200kB, limit 307200kB, failcnt 93314 [ 3323.289789][T20992] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3323.304696][T20992] Memory cgroup stats for /syz1: [ 3323.304979][T20992] anon 126976 [ 3323.304979][T20992] file 352256 [ 3323.304979][T20992] kernel 314077184 [ 3323.304979][T20992] kernel_stack 65536 [ 3323.304979][T20992] pagetables 81920 [ 3323.304979][T20992] sec_pagetables 0 [ 3323.304979][T20992] percpu 5423968 [ 3323.304979][T20992] sock 0 [ 3323.304979][T20992] vmalloc 16384 [ 3323.304979][T20992] shmem 339968 [ 3323.304979][T20992] zswap 0 [ 3323.304979][T20992] zswapped 0 [ 3323.304979][T20992] file_mapped 262144 [ 3323.304979][T20992] file_dirty 12288 [ 3323.304979][T20992] file_writeback 0 [ 3323.304979][T20992] swapcached 0 [ 3323.304979][T20992] anon_thp 0 [ 3323.304979][T20992] file_thp 0 [ 3323.304979][T20992] shmem_thp 0 [ 3323.304979][T20992] inactive_anon 61440 [ 3323.304979][T20992] active_anon 405504 [ 3323.304979][T20992] inactive_file 12288 [ 3323.304979][T20992] active_file 0 [ 3323.304979][T20992] unevictable 0 [ 3323.304979][T20992] slab_reclaimable 245368 [ 3323.304979][T20992] slab_unreclaimable 308218160 [ 3323.304979][T20992] slab 308463528 [ 3323.304979][T20992] workingset_refault_anon 0 [ 3323.304979][T20992] workingset_refault_file 4 [ 3323.304979][T20992] workingset_activate_anon 0 [ 3323.304979][T20992] workingset_activate_file 0 [ 3323.304979][T20992] workingset_restore_anon 0 [ 3323.304979][T20992] workingset_restore_file 2 [ 3323.304979][T20992] workingset_nodereclaim 0 [ 3323.304979][T20992] pgscan 78391 [ 3323.304979][T20992] pgsteal 593 [ 3323.304979][T20992] pgscan_kswapd 0 08:18:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc853030000000000) [ 3323.304979][T20992] pgscan_direct 78391 [ 3323.304979][T20992] pgscan_khugepaged 0 [ 3323.304979][T20992] pgsteal_kswapd 0 [ 3323.304979][T20992] pgsteal_direct 593 [ 3323.304979][T20992] pgsteal_khugepaged 0 [ 3323.304979][T20992] pgfault 409355 [ 3323.304979][T20992] pgmajfault 0 [ 3323.304979][T20992] pgrefill 212839 [ 3323.304979][T20992] pgactivate 77705 [ 3323.304979][T20992] pgdeactivate 0 [ 3323.304979][T20992] pglazyfree 0 [ 3323.304979][T20992] pglazyfreed 0 [ 3323.304979][T20992] zswpin 0 [ 3323.304979][T20992] zswpout 0 [ 3323.499776][T20992] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=20992,uid=0 [ 3323.521930][T20992] Memory cgroup out of memory: Killed process 20992 (syz-executor.1) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:18:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffff7f00000000) [ 3323.546784][T20998] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3323.566964][T20998] CPU: 0 PID: 20998 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3323.577464][T20998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3323.587662][T20998] Call Trace: [ 3323.590988][T20998] [ 3323.593963][T20998] dump_stack_lvl+0x136/0x150 [ 3323.598709][T20998] dump_header+0x10a/0xd70 [ 3323.603199][T20998] oom_kill_process+0x25d/0x600 [ 3323.608130][T20998] out_of_memory+0x35c/0x1660 [ 3323.612919][T20998] ? oom_killer_disable+0x2b0/0x2b0 [ 3323.618195][T20998] ? rcu_read_unlock+0x9/0x60 [ 3323.622938][T20998] ? find_held_lock+0x2d/0x110 [ 3323.627850][T20998] mem_cgroup_out_of_memory+0x206/0x270 [ 3323.633462][T20998] ? mem_cgroup_margin+0x130/0x130 [ 3323.638652][T20998] ? lock_downgrade+0x690/0x690 [ 3323.643554][T20998] try_charge_memcg+0xf9b/0x13b0 [ 3323.648733][T20998] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3323.654867][T20998] ? rcu_read_unlock+0x9/0x60 [ 3323.659627][T20998] ? lock_downgrade+0x690/0x690 [ 3323.664530][T20998] charge_memcg+0x90/0x3b0 [ 3323.668988][T20998] __mem_cgroup_charge+0x2b/0x90 [ 3323.673964][T20998] do_wp_page+0x8eb/0x3520 [ 3323.678427][T20998] ? lock_release+0x670/0x670 [ 3323.683138][T20998] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3323.688546][T20998] ? do_raw_spin_lock+0x124/0x2b0 [ 3323.693608][T20998] ? spin_bug+0x1c0/0x1c0 [ 3323.697966][T20998] ? lock_downgrade+0x690/0x690 [ 3323.702857][T20998] __handle_mm_fault+0x19a1/0x3e60 [ 3323.708019][T20998] ? vm_iomap_memory+0x190/0x190 [ 3323.713138][T20998] handle_mm_fault+0x2ba/0x9c0 [ 3323.717970][T20998] do_user_addr_fault+0x475/0x1230 [ 3323.723133][T20998] ? rcu_is_watching+0x12/0xb0 [ 3323.728289][T20998] exc_page_fault+0x98/0x170 [ 3323.732924][T20998] asm_exc_page_fault+0x26/0x30 [ 3323.737813][T20998] RIP: 0033:0x7f0e44a39610 [ 3323.742277][T20998] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3323.762007][T20998] RSP: 002b:00007ffc44a97870 EFLAGS: 00010246 [ 3323.768110][T20998] RAX: 000000004750851b RBX: 00007f0e44bac018 RCX: 0000001b2ce20000 [ 3323.776118][T20998] RDX: 0000000000000000 RSI: 0000001b2ce20018 RDI: 0000000000000022 [ 3323.784131][T20998] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3323.792128][T20998] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 00007f0e44ba0000 [ 3323.800128][T20998] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3323.808128][T20998] ? __x64_sys_socket+0x11/0xb0 [ 3323.813037][T20998] [ 3323.832395][T20998] memory: usage 307200kB, limit 307200kB, failcnt 73193 [ 3323.847076][T20998] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3323.854895][T20998] Memory cgroup stats for /syz5: [ 3323.855169][T20998] anon 98304 [ 3323.855169][T20998] file 360448 [ 3323.855169][T20998] kernel 314114048 [ 3323.855169][T20998] kernel_stack 65536 [ 3323.855169][T20998] pagetables 73728 [ 3323.855169][T20998] sec_pagetables 0 [ 3323.855169][T20998] percpu 5432688 [ 3323.855169][T20998] sock 0 [ 3323.855169][T20998] vmalloc 20480 [ 3323.855169][T20998] shmem 344064 [ 3323.855169][T20998] zswap 0 [ 3323.855169][T20998] zswapped 0 [ 3323.855169][T20998] file_mapped 327680 [ 3323.855169][T20998] file_dirty 16384 [ 3323.855169][T20998] file_writeback 0 [ 3323.855169][T20998] swapcached 0 [ 3323.855169][T20998] anon_thp 0 [ 3323.855169][T20998] file_thp 0 [ 3323.855169][T20998] shmem_thp 0 [ 3323.855169][T20998] inactive_anon 20480 [ 3323.855169][T20998] active_anon 421888 [ 3323.855169][T20998] inactive_file 0 [ 3323.855169][T20998] active_file 16384 [ 3323.855169][T20998] unevictable 0 [ 3323.855169][T20998] slab_reclaimable 14880 [ 3323.855169][T20998] slab_unreclaimable 308476352 [ 3323.855169][T20998] slab 308491232 [ 3323.855169][T20998] workingset_refault_anon 0 [ 3323.855169][T20998] workingset_refault_file 1 [ 3323.855169][T20998] workingset_activate_anon 0 [ 3323.855169][T20998] workingset_activate_file 0 [ 3323.855169][T20998] workingset_restore_anon 0 [ 3323.855169][T20998] workingset_restore_file 0 [ 3323.855169][T20998] workingset_nodereclaim 0 [ 3323.855169][T20998] pgscan 42475 [ 3323.855169][T20998] pgsteal 447 [ 3323.855169][T20998] pgscan_kswapd 0 [ 3323.855169][T20998] pgscan_direct 42475 [ 3323.855169][T20998] pgscan_khugepaged 0 [ 3323.855169][T20998] pgsteal_kswapd 0 [ 3323.855169][T20998] pgsteal_direct 447 [ 3323.855169][T20998] pgsteal_khugepaged 0 [ 3323.855169][T20998] pgfault 411656 [ 3323.855169][T20998] pgmajfault 0 [ 3323.855169][T20998] pgrefill 140529 [ 3323.855169][T20998] pgactivate 42013 [ 3323.855169][T20998] pgdeactivate 0 [ 3323.855169][T20998] pglazyfree 0 [ 3323.855169][T20998] pglazyfreed 0 [ 3323.855169][T20998] zswpin 0 [ 3323.855169][T20998] zswpout 0 [ 3324.048725][T20998] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=20998,uid=0 [ 3324.064490][T20998] Memory cgroup out of memory: Killed process 20998 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3324.083197][T20997] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3324.093568][T20997] CPU: 1 PID: 20997 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3324.104045][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3324.114160][T20997] Call Trace: [ 3324.117483][T20997] [ 3324.120459][T20997] dump_stack_lvl+0x136/0x150 [ 3324.125215][T20997] dump_header+0x10a/0xd70 [ 3324.129729][T20997] oom_kill_process+0x25d/0x600 [ 3324.134662][T20997] out_of_memory+0x35c/0x1660 [ 3324.139426][T20997] ? oom_killer_disable+0x2b0/0x2b0 [ 3324.144700][T20997] ? rcu_read_unlock+0x9/0x60 [ 3324.149450][T20997] ? find_held_lock+0x2d/0x110 [ 3324.154274][T20997] mem_cgroup_out_of_memory+0x206/0x270 [ 3324.159871][T20997] ? mem_cgroup_margin+0x130/0x130 [ 3324.165020][T20997] ? lock_downgrade+0x690/0x690 [ 3324.169921][T20997] try_charge_memcg+0xf9b/0x13b0 [ 3324.174894][T20997] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3324.180913][T20997] ? rcu_read_unlock+0x9/0x60 [ 3324.185636][T20997] ? lock_downgrade+0x690/0x690 [ 3324.190538][T20997] charge_memcg+0x90/0x3b0 [ 3324.194990][T20997] __mem_cgroup_charge+0x2b/0x90 [ 3324.199961][T20997] do_wp_page+0x8eb/0x3520 [ 3324.204554][T20997] ? lock_release+0x670/0x670 [ 3324.209269][T20997] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3324.214688][T20997] ? do_raw_spin_lock+0x124/0x2b0 [ 3324.219747][T20997] ? spin_bug+0x1c0/0x1c0 [ 3324.224118][T20997] ? lock_downgrade+0x690/0x690 [ 3324.229018][T20997] __handle_mm_fault+0x19a1/0x3e60 [ 3324.234174][T20997] ? vm_iomap_memory+0x190/0x190 [ 3324.239169][T20997] handle_mm_fault+0x2ba/0x9c0 [ 3324.243975][T20997] do_user_addr_fault+0x475/0x1230 [ 3324.249134][T20997] ? rcu_is_watching+0x12/0xb0 [ 3324.253938][T20997] exc_page_fault+0x98/0x170 [ 3324.258566][T20997] asm_exc_page_fault+0x26/0x30 [ 3324.263473][T20997] RIP: 0033:0x7f9ac6239610 [ 3324.267913][T20997] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3324.287638][T20997] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3324.293750][T20997] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 08:18:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd24b0300) [ 3324.301758][T20997] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3324.309751][T20997] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3324.317743][T20997] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3324.325751][T20997] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3324.333747][T20997] ? __sys_socket+0x7c/0x250 [ 3324.338393][T20997] [ 3324.344896][T20997] memory: usage 307200kB, limit 307200kB, failcnt 70235 [ 3324.368993][T20997] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3324.382861][T20997] Memory cgroup stats for /syz2: [ 3324.383148][T20997] anon 102400 [ 3324.383148][T20997] file 360448 [ 3324.383148][T20997] kernel 314093568 [ 3324.383148][T20997] kernel_stack 65536 [ 3324.383148][T20997] pagetables 69632 [ 3324.383148][T20997] sec_pagetables 0 [ 3324.383148][T20997] percpu 5428704 [ 3324.383148][T20997] sock 0 [ 3324.383148][T20997] vmalloc 0 [ 3324.383148][T20997] shmem 348160 [ 3324.383148][T20997] zswap 0 [ 3324.383148][T20997] zswapped 0 [ 3324.383148][T20997] file_mapped 311296 [ 3324.383148][T20997] file_dirty 12288 [ 3324.383148][T20997] file_writeback 0 [ 3324.383148][T20997] swapcached 0 [ 3324.383148][T20997] anon_thp 0 [ 3324.383148][T20997] file_thp 0 [ 3324.383148][T20997] shmem_thp 0 [ 3324.383148][T20997] inactive_anon 32768 [ 3324.383148][T20997] active_anon 417792 [ 3324.383148][T20997] inactive_file 8192 [ 3324.383148][T20997] active_file 4096 [ 3324.383148][T20997] unevictable 0 [ 3324.383148][T20997] slab_reclaimable 217912 [ 3324.383148][T20997] slab_unreclaimable 308288848 [ 3324.383148][T20997] slab 308506760 [ 3324.383148][T20997] workingset_refault_anon 0 [ 3324.383148][T20997] workingset_refault_file 0 [ 3324.383148][T20997] workingset_activate_anon 0 [ 3324.383148][T20997] workingset_activate_file 0 [ 3324.383148][T20997] workingset_restore_anon 0 [ 3324.383148][T20997] workingset_restore_file 0 [ 3324.383148][T20997] workingset_nodereclaim 0 [ 3324.383148][T20997] pgscan 54264 [ 3324.383148][T20997] pgsteal 457 [ 3324.383148][T20997] pgscan_kswapd 0 [ 3324.383148][T20997] pgscan_direct 54264 [ 3324.383148][T20997] pgscan_khugepaged 0 [ 3324.383148][T20997] pgsteal_kswapd 0 [ 3324.383148][T20997] pgsteal_direct 457 [ 3324.383148][T20997] pgsteal_khugepaged 0 [ 3324.383148][T20997] pgfault 421241 [ 3324.383148][T20997] pgmajfault 1 [ 3324.383148][T20997] pgrefill 180580 [ 3324.383148][T20997] pgactivate 53768 [ 3324.383148][T20997] pgdeactivate 0 [ 3324.383148][T20997] pglazyfree 0 [ 3324.383148][T20997] pglazyfreed 0 [ 3324.383148][T20997] zswpin 0 [ 3324.383148][T20997] zswpout 0 [ 3324.612760][T20997] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=20997,uid=0 [ 3324.629227][T20997] Memory cgroup out of memory: Killed process 20997 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:18:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfa030000) 08:18:51 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x40000000) [ 3324.656868][T21004] syz-executor.4 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3324.682092][T21004] CPU: 0 PID: 21004 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3324.692608][T21004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3324.702720][T21004] Call Trace: [ 3324.706050][T21004] [ 3324.709030][T21004] dump_stack_lvl+0x136/0x150 [ 3324.713783][T21004] dump_header+0x10a/0xd70 [ 3324.718279][T21004] oom_kill_process+0x25d/0x600 [ 3324.723208][T21004] out_of_memory+0x35c/0x1660 [ 3324.727986][T21004] ? oom_killer_disable+0x2b0/0x2b0 [ 3324.733246][T21004] ? rcu_read_unlock+0x9/0x60 [ 3324.737966][T21004] ? find_held_lock+0x2d/0x110 [ 3324.742872][T21004] mem_cgroup_out_of_memory+0x206/0x270 [ 3324.748468][T21004] ? mem_cgroup_margin+0x130/0x130 [ 3324.753627][T21004] ? lock_downgrade+0x690/0x690 [ 3324.758527][T21004] try_charge_memcg+0xf9b/0x13b0 [ 3324.763507][T21004] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3324.769540][T21004] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3324.775305][T21004] ? lock_downgrade+0x690/0x690 [ 3324.780200][T21004] ? lock_downgrade+0x690/0x690 [ 3324.785095][T21004] ? rcu_read_unlock+0x9/0x60 [ 3324.789859][T21004] obj_cgroup_charge+0x2af/0x5e0 [ 3324.794835][T21004] ? __alloc_file+0x21/0x270 [ 3324.799634][T21004] kmem_cache_alloc+0xb1/0x3b0 [ 3324.804440][T21004] ? d_instantiate+0x79/0xa0 [ 3324.809066][T21004] __alloc_file+0x21/0x270 [ 3324.813525][T21004] alloc_empty_file+0x71/0x190 [ 3324.818328][T21004] alloc_file+0x5e/0x800 [ 3324.822611][T21004] alloc_file_pseudo+0x169/0x250 [ 3324.827598][T21004] ? alloc_file+0x800/0x800 [ 3324.832138][T21004] ? do_raw_spin_unlock+0x175/0x230 [ 3324.837401][T21004] ? _raw_spin_unlock+0x28/0x40 [ 3324.842309][T21004] ? alloc_fd+0x2e4/0x750 [ 3324.846806][T21004] sock_alloc_file+0x53/0x190 [ 3324.851548][T21004] __sys_socket+0x1a8/0x250 [ 3324.856101][T21004] ? __sys_socket_file+0x1d0/0x1d0 [ 3324.861264][T21004] __x64_sys_socket+0x73/0xb0 [ 3324.865990][T21004] do_syscall_64+0x39/0xb0 [ 3324.870544][T21004] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3324.876494][T21004] RIP: 0033:0x7f79ea88c169 [ 3324.880960][T21004] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3324.900691][T21004] RSP: 002b:00007f79eb505168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3324.909138][T21004] RAX: ffffffffffffffda RBX: 00007f79ea9abf80 RCX: 00007f79ea88c169 [ 3324.917145][T21004] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3324.925179][T21004] RBP: 00007f79ea8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3324.933196][T21004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3324.941288][T21004] R13: 00007ffd939e5d3f R14: 00007f79eb505300 R15: 0000000000022000 [ 3324.949335][T21004] [ 3324.973697][T21004] memory: usage 307200kB, limit 307200kB, failcnt 76370 [ 3324.980908][T21004] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3324.991380][T21004] Memory cgroup stats for /syz4: [ 3324.991667][T21004] anon 106496 [ 3324.991667][T21004] file 323584 [ 3324.991667][T21004] kernel 314142720 [ 3324.991667][T21004] kernel_stack 65536 [ 3324.991667][T21004] pagetables 81920 [ 3324.991667][T21004] sec_pagetables 0 [ 3324.991667][T21004] percpu 5432256 [ 3324.991667][T21004] sock 0 [ 3324.991667][T21004] vmalloc 0 [ 3324.991667][T21004] shmem 311296 [ 3324.991667][T21004] zswap 0 [ 3324.991667][T21004] zswapped 0 [ 3324.991667][T21004] file_mapped 311296 [ 3324.991667][T21004] file_dirty 12288 [ 3324.991667][T21004] file_writeback 0 [ 3324.991667][T21004] swapcached 0 [ 3324.991667][T21004] anon_thp 0 [ 3324.991667][T21004] file_thp 0 [ 3324.991667][T21004] shmem_thp 0 [ 3324.991667][T21004] inactive_anon 57344 [ 3324.991667][T21004] active_anon 360448 [ 3324.991667][T21004] inactive_file 12288 [ 3324.991667][T21004] active_file 0 [ 3324.991667][T21004] unevictable 0 [ 3324.991667][T21004] slab_reclaimable 17160 [ 3324.991667][T21004] slab_unreclaimable 308494648 [ 3324.991667][T21004] slab 308511808 [ 3324.991667][T21004] workingset_refault_anon 0 [ 3324.991667][T21004] workingset_refault_file 0 [ 3324.991667][T21004] workingset_activate_anon 0 [ 3324.991667][T21004] workingset_activate_file 0 [ 3324.991667][T21004] workingset_restore_anon 0 [ 3324.991667][T21004] workingset_restore_file 0 [ 3324.991667][T21004] workingset_nodereclaim 0 [ 3324.991667][T21004] pgscan 49891 [ 3324.991667][T21004] pgsteal 484 [ 3324.991667][T21004] pgscan_kswapd 0 [ 3324.991667][T21004] pgscan_direct 49891 [ 3324.991667][T21004] pgscan_khugepaged 0 [ 3324.991667][T21004] pgsteal_kswapd 0 [ 3324.991667][T21004] pgsteal_direct 484 [ 3324.991667][T21004] pgsteal_khugepaged 0 [ 3324.991667][T21004] pgfault 404219 [ 3324.991667][T21004] pgmajfault 1 [ 3324.991667][T21004] pgrefill 136795 [ 3324.991667][T21004] pgactivate 49346 [ 3324.991667][T21004] pgdeactivate 0 [ 3324.991667][T21004] pglazyfree 0 [ 3324.991667][T21004] pglazyfreed 0 [ 3324.991667][T21004] zswpin 0 [ 3324.991667][T21004] zswpout 0 [ 3325.184095][T21004] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21003,uid=0 [ 3325.201625][T21004] Memory cgroup out of memory: Killed process 21003 (syz-executor.4) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3325.220213][T21005] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3325.233274][T21005] CPU: 1 PID: 21005 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3325.243763][T21005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3325.253869][T21005] Call Trace: [ 3325.257285][T21005] [ 3325.260263][T21005] dump_stack_lvl+0x136/0x150 [ 3325.265003][T21005] dump_header+0x10a/0xd70 [ 3325.269487][T21005] oom_kill_process+0x25d/0x600 08:18:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xc953030000000000) [ 3325.274409][T21005] out_of_memory+0x35c/0x1660 [ 3325.279171][T21005] ? oom_killer_disable+0x2b0/0x2b0 [ 3325.284441][T21005] ? rcu_read_unlock+0x9/0x60 [ 3325.289277][T21005] ? find_held_lock+0x2d/0x110 [ 3325.294134][T21005] mem_cgroup_out_of_memory+0x206/0x270 [ 3325.299753][T21005] ? mem_cgroup_margin+0x130/0x130 [ 3325.304913][T21005] ? lock_downgrade+0x690/0x690 [ 3325.309815][T21005] try_charge_memcg+0xf9b/0x13b0 [ 3325.314789][T21005] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3325.320841][T21005] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3325.326609][T21005] ? lock_downgrade+0x690/0x690 [ 3325.331504][T21005] ? lock_downgrade+0x690/0x690 [ 3325.336398][T21005] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3325.341978][T21005] __alloc_pages+0x1f3/0x4a0 [ 3325.346601][T21005] ? ___slab_alloc+0xca0/0x1400 [ 3325.351490][T21005] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3325.358285][T21005] ? print_usage_bug.part.0+0x660/0x660 [ 3325.363881][T21005] ? find_held_lock+0x2d/0x110 [ 3325.368699][T21005] alloc_pages+0x1aa/0x270 [ 3325.373161][T21005] pte_alloc_one+0x1a/0x230 [ 3325.377705][T21005] __pte_alloc+0x6d/0x260 [ 3325.382082][T21005] ? pmd_install+0x160/0x160 [ 3325.386717][T21005] ? _raw_spin_unlock+0x28/0x40 [ 3325.391607][T21005] ? __pmd_alloc+0x30c/0x5d0 [ 3325.396255][T21005] __handle_mm_fault+0x3626/0x3e60 [ 3325.401417][T21005] ? vm_iomap_memory+0x190/0x190 [ 3325.406444][T21005] handle_mm_fault+0x2ba/0x9c0 [ 3325.411257][T21005] do_user_addr_fault+0x475/0x1230 [ 3325.416411][T21005] ? rcu_is_watching+0x12/0xb0 [ 3325.421216][T21005] exc_page_fault+0x98/0x170 [ 3325.425842][T21005] asm_exc_page_fault+0x26/0x30 [ 3325.430728][T21005] RIP: 0033:0x7faa0ba2bde9 [ 3325.435170][T21005] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3325.454895][T21005] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3325.460993][T21005] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3325.469002][T21005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3325.476995][T21005] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3325.484990][T21005] R10: 00007faa0b600068 R11: 0000000000000246 R12: 000000000032b0c8 [ 3325.492987][T21005] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3325.501005][T21005] [ 3325.512827][T21005] memory: usage 307200kB, limit 307200kB, failcnt 93421 [ 3325.520229][T21005] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3325.528086][T21005] Memory cgroup stats for /syz1: [ 3325.528372][T21005] anon 126976 [ 3325.528372][T21005] file 352256 [ 3325.528372][T21005] kernel 314093568 [ 3325.528372][T21005] kernel_stack 65536 [ 3325.528372][T21005] pagetables 77824 [ 3325.528372][T21005] sec_pagetables 0 [ 3325.528372][T21005] percpu 5424032 [ 3325.528372][T21005] sock 0 [ 3325.528372][T21005] vmalloc 16384 [ 3325.528372][T21005] shmem 339968 [ 3325.528372][T21005] zswap 0 [ 3325.528372][T21005] zswapped 0 [ 3325.528372][T21005] file_mapped 262144 [ 3325.528372][T21005] file_dirty 12288 [ 3325.528372][T21005] file_writeback 0 [ 3325.528372][T21005] swapcached 0 [ 3325.528372][T21005] anon_thp 0 [ 3325.528372][T21005] file_thp 0 [ 3325.528372][T21005] shmem_thp 0 [ 3325.528372][T21005] inactive_anon 36864 [ 3325.528372][T21005] active_anon 430080 [ 3325.528372][T21005] inactive_file 12288 [ 3325.528372][T21005] active_file 0 [ 3325.528372][T21005] unevictable 0 [ 3325.528372][T21005] slab_reclaimable 245368 [ 3325.528372][T21005] slab_unreclaimable 308229768 [ 3325.528372][T21005] slab 308475136 [ 3325.528372][T21005] workingset_refault_anon 0 [ 3325.528372][T21005] workingset_refault_file 4 [ 3325.528372][T21005] workingset_activate_anon 0 [ 3325.528372][T21005] workingset_activate_file 0 [ 3325.528372][T21005] workingset_restore_anon 0 [ 3325.528372][T21005] workingset_restore_file 2 [ 3325.528372][T21005] workingset_nodereclaim 0 [ 3325.528372][T21005] pgscan 78391 [ 3325.528372][T21005] pgsteal 593 [ 3325.528372][T21005] pgscan_kswapd 0 [ 3325.528372][T21005] pgscan_direct 78391 [ 3325.528372][T21005] pgscan_khugepaged 0 [ 3325.528372][T21005] pgsteal_kswapd 0 [ 3325.528372][T21005] pgsteal_direct 593 [ 3325.528372][T21005] pgsteal_khugepaged 0 [ 3325.528372][T21005] pgfault 409414 [ 3325.528372][T21005] pgmajfault 0 [ 3325.528372][T21005] pgrefill 213055 [ 3325.528372][T21005] pgactivate 77705 [ 3325.528372][T21005] pgdeactivate 0 [ 3325.528372][T21005] pglazyfree 0 [ 3325.528372][T21005] pglazyfreed 0 [ 3325.528372][T21005] zswpin 0 [ 3325.528372][T21005] zswpout 0 08:18:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffffff00000000) [ 3325.720985][T21005] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21005,uid=0 [ 3325.736843][T21005] Memory cgroup out of memory: Killed process 21005 (syz-executor.1) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:18:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfa580300) [ 3325.784931][T21007] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3325.836764][T21007] CPU: 1 PID: 21007 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3325.847290][T21007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3325.857402][T21007] Call Trace: [ 3325.860735][T21007] [ 3325.863717][T21007] dump_stack_lvl+0x136/0x150 [ 3325.868500][T21007] dump_header+0x10a/0xd70 [ 3325.872992][T21007] oom_kill_process+0x25d/0x600 [ 3325.877919][T21007] out_of_memory+0x35c/0x1660 [ 3325.882674][T21007] ? find_held_lock+0x2d/0x110 [ 3325.887515][T21007] ? oom_killer_disable+0x2b0/0x2b0 [ 3325.892793][T21007] ? rcu_read_unlock+0x9/0x60 [ 3325.897534][T21007] ? find_held_lock+0x2d/0x110 [ 3325.902481][T21007] mem_cgroup_out_of_memory+0x206/0x270 [ 3325.908099][T21007] ? mem_cgroup_margin+0x130/0x130 [ 3325.913287][T21007] ? lock_downgrade+0x690/0x690 [ 3325.918219][T21007] try_charge_memcg+0xf9b/0x13b0 [ 3325.923312][T21007] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3325.929351][T21007] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3325.935139][T21007] ? lock_downgrade+0x690/0x690 [ 3325.940077][T21007] ? lock_downgrade+0x690/0x690 [ 3325.945000][T21007] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3325.950592][T21007] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3325.956802][T21007] copy_process+0x13a7/0x7590 [ 3325.961521][T21007] ? __lock_acquire+0xbc5/0x5d40 [ 3325.966503][T21007] ? __cleanup_sighand+0xb0/0xb0 [ 3325.971484][T21007] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3325.977589][T21007] ? psi_memstall_leave+0x174/0x250 [ 3325.982854][T21007] ? lock_downgrade+0x690/0x690 [ 3325.987746][T21007] kernel_clone+0xeb/0x890 [ 3325.992199][T21007] ? create_io_thread+0xf0/0xf0 [ 3325.997095][T21007] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3326.003396][T21007] ? lock_downgrade+0x690/0x690 [ 3326.008321][T21007] __do_sys_clone+0xba/0x100 [ 3326.012962][T21007] ? kernel_clone+0x890/0x890 [ 3326.017696][T21007] ? syscall_enter_from_user_mode+0x26/0x80 [ 3326.023638][T21007] do_syscall_64+0x39/0xb0 [ 3326.028129][T21007] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3326.034098][T21007] RIP: 0033:0x7f0e44a8d591 [ 3326.038547][T21007] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3326.058186][T21007] RSP: 002b:00007ffc44a97818 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3326.066639][T21007] RAX: ffffffffffffffda RBX: 00007f0e458bd700 RCX: 00007f0e44a8d591 [ 3326.074660][T21007] RDX: 00007f0e458bd9d0 RSI: 00007f0e458bd2f0 RDI: 00000000003d0f00 [ 3326.082667][T21007] RBP: 00007ffc44a97a60 R08: 00007f0e458bd700 R09: 00007f0e458bd700 [ 3326.090668][T21007] R10: 00007f0e458bd9d0 R11: 0000000000000206 R12: 00007ffc44a978ce [ 3326.098761][T21007] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3326.106800][T21007] 08:18:52 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="90040000130001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x4840}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3326.138504][T21007] memory: usage 307184kB, limit 307200kB, failcnt 73279 [ 3326.145811][T21007] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3326.153385][T21007] Memory cgroup stats for /syz5: [ 3326.153658][T21007] anon 86016 [ 3326.153658][T21007] file 364544 [ 3326.153658][T21007] kernel 314105856 [ 3326.153658][T21007] kernel_stack 32768 [ 3326.153658][T21007] pagetables 73728 [ 3326.153658][T21007] sec_pagetables 0 [ 3326.153658][T21007] percpu 5432688 [ 3326.153658][T21007] sock 0 [ 3326.153658][T21007] vmalloc 20480 [ 3326.153658][T21007] shmem 344064 [ 3326.153658][T21007] zswap 0 [ 3326.153658][T21007] zswapped 0 [ 3326.153658][T21007] file_mapped 327680 [ 3326.153658][T21007] file_dirty 0 [ 3326.153658][T21007] file_writeback 0 [ 3326.153658][T21007] swapcached 0 [ 3326.153658][T21007] anon_thp 0 [ 3326.153658][T21007] file_thp 0 [ 3326.153658][T21007] shmem_thp 0 [ 3326.153658][T21007] inactive_anon 24576 [ 3326.153658][T21007] active_anon 405504 [ 3326.153658][T21007] inactive_file 0 [ 3326.153658][T21007] active_file 20480 [ 3326.153658][T21007] unevictable 0 [ 3326.153658][T21007] slab_reclaimable 13192 [ 3326.153658][T21007] slab_unreclaimable 308475240 [ 3326.153658][T21007] slab 308488432 [ 3326.153658][T21007] workingset_refault_anon 0 [ 3326.153658][T21007] workingset_refault_file 1 [ 3326.153658][T21007] workingset_activate_anon 0 [ 3326.153658][T21007] workingset_activate_file 0 [ 3326.153658][T21007] workingset_restore_anon 0 [ 3326.153658][T21007] workingset_restore_file 0 [ 3326.153658][T21007] workingset_nodereclaim 0 [ 3326.153658][T21007] pgscan 42531 [ 3326.153658][T21007] pgsteal 447 [ 3326.153658][T21007] pgscan_kswapd 0 [ 3326.153658][T21007] pgscan_direct 42531 [ 3326.153658][T21007] pgscan_khugepaged 0 [ 3326.153658][T21007] pgsteal_kswapd 0 [ 3326.153658][T21007] pgsteal_direct 447 [ 3326.153658][T21007] pgsteal_khugepaged 0 [ 3326.153658][T21007] pgfault 411693 [ 3326.153658][T21007] pgmajfault 0 [ 3326.153658][T21007] pgrefill 140977 [ 3326.153658][T21007] pgactivate 42069 [ 3326.153658][T21007] pgdeactivate 0 [ 3326.153658][T21007] pglazyfree 0 [ 3326.153658][T21007] pglazyfreed 0 [ 3326.153658][T21007] zswpin 0 [ 3326.153658][T21007] zswpout 0 08:18:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd34b0300) [ 3326.377075][T21007] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21007,uid=0 [ 3326.394588][T21007] Memory cgroup out of memory: Killed process 21007 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3326.415712][T21009] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3326.430196][T21009] CPU: 0 PID: 21009 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3326.440704][T21009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3326.450825][T21009] Call Trace: [ 3326.454152][T21009] [ 3326.457575][T21009] dump_stack_lvl+0x136/0x150 [ 3326.462328][T21009] dump_header+0x10a/0xd70 [ 3326.466814][T21009] oom_kill_process+0x25d/0x600 [ 3326.471743][T21009] out_of_memory+0x35c/0x1660 [ 3326.476500][T21009] ? oom_killer_disable+0x2b0/0x2b0 [ 3326.481773][T21009] ? rcu_read_unlock+0x9/0x60 [ 3326.486512][T21009] ? find_held_lock+0x2d/0x110 [ 3326.491351][T21009] mem_cgroup_out_of_memory+0x206/0x270 [ 3326.497032][T21009] ? mem_cgroup_margin+0x130/0x130 [ 3326.502197][T21009] ? lock_downgrade+0x690/0x690 [ 3326.507121][T21009] try_charge_memcg+0xf9b/0x13b0 [ 3326.512126][T21009] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3326.518180][T21009] ? rcu_read_unlock+0x9/0x60 [ 3326.522931][T21009] ? lock_downgrade+0x690/0x690 [ 3326.527874][T21009] charge_memcg+0x90/0x3b0 [ 3326.532347][T21009] __mem_cgroup_charge+0x2b/0x90 [ 3326.537371][T21009] do_wp_page+0x8eb/0x3520 [ 3326.541866][T21009] ? lock_release+0x670/0x670 [ 3326.546608][T21009] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3326.552059][T21009] ? do_raw_spin_lock+0x124/0x2b0 [ 3326.557146][T21009] ? spin_bug+0x1c0/0x1c0 [ 3326.561563][T21009] ? lock_downgrade+0x690/0x690 [ 3326.566470][T21009] __handle_mm_fault+0x19a1/0x3e60 [ 3326.571903][T21009] ? vm_iomap_memory+0x190/0x190 [ 3326.577009][T21009] handle_mm_fault+0x2ba/0x9c0 [ 3326.581838][T21009] do_user_addr_fault+0x475/0x1230 [ 3326.587007][T21009] ? rcu_is_watching+0x12/0xb0 [ 3326.591806][T21009] exc_page_fault+0x98/0x170 [ 3326.596456][T21009] asm_exc_page_fault+0x26/0x30 [ 3326.601362][T21009] RIP: 0033:0x7f9ac6239610 [ 3326.605810][T21009] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3326.625460][T21009] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3326.631578][T21009] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3326.639609][T21009] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3326.647621][T21009] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3326.655621][T21009] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3326.663728][T21009] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3326.671751][T21009] ? __sys_socket+0x7c/0x250 [ 3326.676409][T21009] [ 3326.699112][T21009] memory: usage 307184kB, limit 307200kB, failcnt 70354 [ 3326.707157][T21009] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3326.714412][T21009] Memory cgroup stats for /syz2: [ 3326.714658][T21009] anon 102400 [ 3326.714658][T21009] file 360448 [ 3326.714658][T21009] kernel 314093568 [ 3326.714658][T21009] kernel_stack 65536 [ 3326.714658][T21009] pagetables 69632 [ 3326.714658][T21009] sec_pagetables 0 [ 3326.714658][T21009] percpu 5428704 [ 3326.714658][T21009] sock 0 [ 3326.714658][T21009] vmalloc 0 [ 3326.714658][T21009] shmem 348160 [ 3326.714658][T21009] zswap 0 [ 3326.714658][T21009] zswapped 0 [ 3326.714658][T21009] file_mapped 311296 [ 3326.714658][T21009] file_dirty 4096 [ 3326.714658][T21009] file_writeback 0 [ 3326.714658][T21009] swapcached 0 [ 3326.714658][T21009] anon_thp 0 [ 3326.714658][T21009] file_thp 0 [ 3326.714658][T21009] shmem_thp 0 [ 3326.714658][T21009] inactive_anon 40960 [ 3326.714658][T21009] active_anon 409600 [ 3326.714658][T21009] inactive_file 4096 [ 3326.714658][T21009] active_file 8192 [ 3326.714658][T21009] unevictable 0 [ 3326.714658][T21009] slab_reclaimable 217912 [ 3326.714658][T21009] slab_unreclaimable 308286472 [ 3326.714658][T21009] slab 308504384 [ 3326.714658][T21009] workingset_refault_anon 0 [ 3326.714658][T21009] workingset_refault_file 0 [ 3326.714658][T21009] workingset_activate_anon 0 [ 3326.714658][T21009] workingset_activate_file 0 [ 3326.714658][T21009] workingset_restore_anon 0 [ 3326.714658][T21009] workingset_restore_file 0 [ 3326.714658][T21009] workingset_nodereclaim 0 [ 3326.714658][T21009] pgscan 54345 [ 3326.714658][T21009] pgsteal 458 [ 3326.714658][T21009] pgscan_kswapd 0 [ 3326.714658][T21009] pgscan_direct 54345 [ 3326.714658][T21009] pgscan_khugepaged 0 [ 3326.714658][T21009] pgsteal_kswapd 0 [ 3326.714658][T21009] pgsteal_direct 458 [ 3326.714658][T21009] pgsteal_khugepaged 0 [ 3326.714658][T21009] pgfault 421287 [ 3326.714658][T21009] pgmajfault 1 [ 3326.714658][T21009] pgrefill 180771 [ 3326.714658][T21009] pgactivate 53848 [ 3326.714658][T21009] pgdeactivate 0 [ 3326.714658][T21009] pglazyfree 0 [ 3326.714658][T21009] pglazyfreed 0 [ 3326.714658][T21009] zswpin 0 08:18:53 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x40510300) 08:18:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfb580300) [ 3326.714658][T21009] zswpout 0 [ 3326.905860][T21009] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21009,uid=0 [ 3326.921833][T21009] Memory cgroup out of memory: Killed process 21009 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:18:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffffff8a400000) [ 3327.051811][T21012] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3327.108229][T21012] CPU: 0 PID: 21012 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3327.118748][T21012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3327.128860][T21012] Call Trace: [ 3327.132182][T21012] [ 3327.135246][T21012] dump_stack_lvl+0x136/0x150 [ 3327.140007][T21012] dump_header+0x10a/0xd70 [ 3327.144539][T21012] oom_kill_process+0x25d/0x600 [ 3327.149466][T21012] out_of_memory+0x35c/0x1660 [ 3327.154262][T21012] ? find_held_lock+0x2d/0x110 [ 3327.159145][T21012] ? oom_killer_disable+0x2b0/0x2b0 [ 3327.164459][T21012] ? rcu_read_unlock+0x9/0x60 [ 3327.169216][T21012] ? find_held_lock+0x2d/0x110 [ 3327.174060][T21012] mem_cgroup_out_of_memory+0x206/0x270 [ 3327.179661][T21012] ? mem_cgroup_margin+0x130/0x130 [ 3327.184820][T21012] ? lock_downgrade+0x690/0x690 [ 3327.189719][T21012] try_charge_memcg+0xf9b/0x13b0 [ 3327.194724][T21012] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3327.200735][T21012] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3327.206501][T21012] ? lock_downgrade+0x690/0x690 [ 3327.211401][T21012] ? lock_downgrade+0x690/0x690 [ 3327.216302][T21012] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3327.221890][T21012] __alloc_pages+0x1f3/0x4a0 [ 3327.226956][T21012] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3327.233761][T21012] ? __lock_acquire+0xbc5/0x5d40 [ 3327.238748][T21012] alloc_pages+0x1aa/0x270 [ 3327.243221][T21012] __pmd_alloc+0x3f/0x5d0 [ 3327.247679][T21012] __handle_mm_fault+0x932/0x3e60 [ 3327.252759][T21012] ? vm_iomap_memory+0x190/0x190 [ 3327.257760][T21012] handle_mm_fault+0x2ba/0x9c0 [ 3327.262567][T21012] do_user_addr_fault+0x475/0x1230 [ 3327.267740][T21012] ? rcu_is_watching+0x12/0xb0 [ 3327.272547][T21012] exc_page_fault+0x98/0x170 [ 3327.277175][T21012] asm_exc_page_fault+0x26/0x30 [ 3327.282064][T21012] RIP: 0033:0x7f79ea82bde9 [ 3327.286509][T21012] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3327.306266][T21012] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3327.312450][T21012] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3327.320451][T21012] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3327.328459][T21012] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3327.336464][T21012] R10: 00007f79ea400068 R11: 0000000000000246 R12: 000000000032b86e [ 3327.344472][T21012] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3327.352584][T21012] [ 3327.401066][T21012] memory: usage 307184kB, limit 307200kB, failcnt 76531 [ 3327.413175][T21012] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3327.425841][T21012] Memory cgroup stats for /syz4: [ 3327.426132][T21012] anon 135168 [ 3327.426132][T21012] file 319488 [ 3327.426132][T21012] kernel 314101760 [ 3327.426132][T21012] kernel_stack 65536 [ 3327.426132][T21012] pagetables 69632 [ 3327.426132][T21012] sec_pagetables 0 [ 3327.426132][T21012] percpu 5432256 [ 3327.426132][T21012] sock 0 [ 3327.426132][T21012] vmalloc 0 [ 3327.426132][T21012] shmem 311296 [ 3327.426132][T21012] zswap 0 [ 3327.426132][T21012] zswapped 0 [ 3327.426132][T21012] file_mapped 311296 [ 3327.426132][T21012] file_dirty 4096 [ 3327.426132][T21012] file_writeback 0 [ 3327.426132][T21012] swapcached 0 [ 3327.426132][T21012] anon_thp 0 [ 3327.426132][T21012] file_thp 0 [ 3327.426132][T21012] shmem_thp 0 [ 3327.426132][T21012] inactive_anon 61440 [ 3327.426132][T21012] active_anon 385024 [ 3327.426132][T21012] inactive_file 8192 [ 3327.426132][T21012] active_file 0 [ 3327.426132][T21012] unevictable 0 [ 3327.426132][T21012] slab_reclaimable 16920 [ 3327.426132][T21012] slab_unreclaimable 308486536 [ 3327.426132][T21012] slab 308503456 [ 3327.426132][T21012] workingset_refault_anon 0 [ 3327.426132][T21012] workingset_refault_file 0 [ 3327.426132][T21012] workingset_activate_anon 0 [ 3327.426132][T21012] workingset_activate_file 0 [ 3327.426132][T21012] workingset_restore_anon 0 [ 3327.426132][T21012] workingset_restore_file 0 [ 3327.426132][T21012] workingset_nodereclaim 0 [ 3327.426132][T21012] pgscan 49985 [ 3327.426132][T21012] pgsteal 486 [ 3327.426132][T21012] pgscan_kswapd 0 [ 3327.426132][T21012] pgscan_direct 49985 [ 3327.426132][T21012] pgscan_khugepaged 0 [ 3327.426132][T21012] pgsteal_kswapd 0 [ 3327.426132][T21012] pgsteal_direct 486 [ 3327.426132][T21012] pgsteal_khugepaged 0 [ 3327.426132][T21012] pgfault 404280 [ 3327.426132][T21012] pgmajfault 1 [ 3327.426132][T21012] pgrefill 137308 [ 3327.426132][T21012] pgactivate 49438 [ 3327.426132][T21012] pgdeactivate 0 [ 3327.426132][T21012] pglazyfree 0 [ 3327.426132][T21012] pglazyfreed 0 [ 3327.426132][T21012] zswpin 0 [ 3327.426132][T21012] zswpout 0 [ 3327.618196][T21012] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21012,uid=0 [ 3327.634535][T21012] Memory cgroup out of memory: Killed process 21012 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:54 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xca53030000000000) [ 3327.654197][T21021] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3327.673747][T21021] CPU: 1 PID: 21021 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3327.684261][T21021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3327.694458][T21021] Call Trace: [ 3327.697787][T21021] [ 3327.700773][T21021] dump_stack_lvl+0x136/0x150 [ 3327.705614][T21021] dump_header+0x10a/0xd70 [ 3327.710112][T21021] oom_kill_process+0x25d/0x600 [ 3327.715127][T21021] out_of_memory+0x35c/0x1660 [ 3327.719893][T21021] ? oom_killer_disable+0x2b0/0x2b0 [ 3327.725143][T21021] ? rcu_read_unlock+0x9/0x60 [ 3327.729867][T21021] ? find_held_lock+0x2d/0x110 [ 3327.734683][T21021] mem_cgroup_out_of_memory+0x206/0x270 [ 3327.740276][T21021] ? mem_cgroup_margin+0x130/0x130 [ 3327.745430][T21021] ? lock_downgrade+0x690/0x690 [ 3327.750333][T21021] try_charge_memcg+0xf9b/0x13b0 [ 3327.755343][T21021] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3327.761375][T21021] ? rcu_read_unlock+0x9/0x60 [ 3327.766100][T21021] ? lock_downgrade+0x690/0x690 [ 3327.771012][T21021] charge_memcg+0x90/0x3b0 [ 3327.775485][T21021] __mem_cgroup_charge+0x2b/0x90 [ 3327.780471][T21021] ? copy_mc_to_kernel+0x3e/0x90 [ 3327.785460][T21021] do_wp_page+0x8eb/0x3520 [ 3327.790009][T21021] ? lock_release+0x670/0x670 [ 3327.794720][T21021] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3327.800146][T21021] ? do_raw_spin_lock+0x124/0x2b0 [ 3327.805210][T21021] ? spin_bug+0x1c0/0x1c0 [ 3327.809578][T21021] ? lock_downgrade+0x690/0x690 [ 3327.814573][T21021] __handle_mm_fault+0x19a1/0x3e60 [ 3327.819734][T21021] ? vm_iomap_memory+0x190/0x190 [ 3327.824831][T21021] handle_mm_fault+0x2ba/0x9c0 [ 3327.829640][T21021] do_user_addr_fault+0x475/0x1230 [ 3327.834801][T21021] ? rcu_is_watching+0x12/0xb0 [ 3327.839623][T21021] exc_page_fault+0x98/0x170 [ 3327.844262][T21021] asm_exc_page_fault+0x26/0x30 [ 3327.849179][T21021] RIP: 0033:0x7f0e44a366e5 [ 3327.853714][T21021] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3327.873409][T21021] RSP: 002b:00007ffc44a97920 EFLAGS: 00010206 [ 3327.879602][T21021] RAX: 0000000000000003 RBX: 00007f0e44babf80 RCX: 00007f0e44ba80c0 [ 3327.887604][T21021] RDX: 00007f0e44ba80c0 RSI: 0000000000000080 RDI: 00007f0e44babf80 [ 3327.895635][T21021] RBP: 00007f0e44babf80 R08: 00007ffc44a9a080 R09: 0000000000000000 [ 3327.903661][T21021] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 000000000032bd31 [ 3327.911659][T21021] R13: 00007ffc44a97a30 R14: 00007f0e44babf80 R15: 0000000000000032 [ 3327.919675][T21021] [ 3327.983910][T21021] memory: usage 307200kB, limit 307200kB, failcnt 73409 [ 3327.991117][T21021] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3327.998373][T21021] Memory cgroup stats for /syz5: [ 3327.998623][T21021] anon 94208 [ 3327.998623][T21021] file 348160 [ 3327.998623][T21021] kernel 314130432 [ 3327.998623][T21021] kernel_stack 65536 [ 3327.998623][T21021] pagetables 73728 [ 3327.998623][T21021] sec_pagetables 0 [ 3327.998623][T21021] percpu 5432752 [ 3327.998623][T21021] sock 0 [ 3327.998623][T21021] vmalloc 20480 [ 3327.998623][T21021] shmem 344064 [ 3327.998623][T21021] zswap 0 [ 3327.998623][T21021] zswapped 0 [ 3327.998623][T21021] file_mapped 327680 [ 3327.998623][T21021] file_dirty 0 [ 3327.998623][T21021] file_writeback 0 [ 3327.998623][T21021] swapcached 0 [ 3327.998623][T21021] anon_thp 0 [ 3327.998623][T21021] file_thp 0 [ 3327.998623][T21021] shmem_thp 0 [ 3327.998623][T21021] inactive_anon 45056 [ 3327.998623][T21021] active_anon 393216 [ 3327.998623][T21021] inactive_file 0 [ 3327.998623][T21021] active_file 4096 [ 3327.998623][T21021] unevictable 0 [ 3327.998623][T21021] slab_reclaimable 14160 [ 3327.998623][T21021] slab_unreclaimable 308488264 [ 3327.998623][T21021] slab 308502424 [ 3327.998623][T21021] workingset_refault_anon 0 [ 3327.998623][T21021] workingset_refault_file 1 [ 3327.998623][T21021] workingset_activate_anon 0 [ 3327.998623][T21021] workingset_activate_file 0 [ 3327.998623][T21021] workingset_restore_anon 0 [ 3327.998623][T21021] workingset_restore_file 0 [ 3327.998623][T21021] workingset_nodereclaim 0 [ 3327.998623][T21021] pgscan 42650 [ 3327.998623][T21021] pgsteal 452 [ 3327.998623][T21021] pgscan_kswapd 0 [ 3327.998623][T21021] pgscan_direct 42650 [ 3327.998623][T21021] pgscan_khugepaged 0 [ 3327.998623][T21021] pgsteal_kswapd 0 [ 3327.998623][T21021] pgsteal_direct 452 [ 3327.998623][T21021] pgsteal_khugepaged 0 [ 3327.998623][T21021] pgfault 411737 [ 3327.998623][T21021] pgmajfault 0 [ 3327.998623][T21021] pgrefill 140977 [ 3327.998623][T21021] pgactivate 42183 [ 3327.998623][T21021] pgdeactivate 0 [ 3327.998623][T21021] pglazyfree 0 [ 3327.998623][T21021] pglazyfreed 0 [ 3327.998623][T21021] zswpin 0 [ 3327.998623][T21021] zswpout 0 08:18:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd4020000) [ 3328.190683][T21021] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21021,uid=0 [ 3328.206927][T21021] Memory cgroup out of memory: Killed process 21021 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3328.224932][T21017] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3328.237039][T21017] CPU: 0 PID: 21017 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3328.247532][T21017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3328.257643][T21017] Call Trace: [ 3328.260966][T21017] [ 3328.263939][T21017] dump_stack_lvl+0x136/0x150 [ 3328.268674][T21017] dump_header+0x10a/0xd70 [ 3328.273159][T21017] oom_kill_process+0x25d/0x600 [ 3328.278084][T21017] out_of_memory+0x35c/0x1660 [ 3328.282846][T21017] ? oom_killer_disable+0x2b0/0x2b0 [ 3328.288125][T21017] ? rcu_read_unlock+0x9/0x60 [ 3328.292861][T21017] ? find_held_lock+0x2d/0x110 [ 3328.297684][T21017] mem_cgroup_out_of_memory+0x206/0x270 [ 3328.303284][T21017] ? mem_cgroup_margin+0x130/0x130 [ 3328.308462][T21017] ? lock_downgrade+0x690/0x690 [ 3328.313363][T21017] try_charge_memcg+0xf9b/0x13b0 [ 3328.318337][T21017] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3328.324351][T21017] ? rcu_read_unlock+0x9/0x60 [ 3328.329064][T21017] ? lock_downgrade+0x690/0x690 [ 3328.333964][T21017] charge_memcg+0x90/0x3b0 [ 3328.338428][T21017] __mem_cgroup_charge+0x2b/0x90 [ 3328.343406][T21017] ? copy_mc_to_kernel+0x3e/0x90 [ 3328.348399][T21017] do_wp_page+0x8eb/0x3520 [ 3328.352896][T21017] ? lock_release+0x670/0x670 [ 3328.357605][T21017] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3328.363039][T21017] ? do_raw_spin_lock+0x124/0x2b0 [ 3328.368111][T21017] ? spin_bug+0x1c0/0x1c0 [ 3328.372490][T21017] __handle_mm_fault+0x19a1/0x3e60 [ 3328.377651][T21017] ? vm_iomap_memory+0x190/0x190 [ 3328.382648][T21017] handle_mm_fault+0x2ba/0x9c0 [ 3328.387467][T21017] do_user_addr_fault+0x475/0x1230 [ 3328.392628][T21017] ? rcu_is_watching+0x12/0xb0 [ 3328.397468][T21017] exc_page_fault+0x98/0x170 [ 3328.402096][T21017] asm_exc_page_fault+0x26/0x30 [ 3328.406986][T21017] RIP: 0033:0x7f461ea36fdd [ 3328.411423][T21017] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3328.431069][T21017] RSP: 002b:00007ffea8ee1f60 EFLAGS: 00010207 [ 3328.437172][T21017] RAX: 0000000000000001 RBX: 00007f461ebabf8c RCX: 00007f461ea8c169 [ 3328.445184][T21017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f461ebabf88 [ 3328.453184][T21017] RBP: 00007f461ebabf80 R08: 00007f461f7c3700 R09: 0000000000000000 [ 3328.461182][T21017] R10: 00007f461f7c3700 R11: 0000000000000246 R12: 00007f461ebabf8c [ 3328.469186][T21017] R13: 00007f461e600060 R14: 00007f461ebabf80 R15: 0000000000000000 [ 3328.477234][T21017] [ 3328.491519][T21017] memory: usage 307200kB, limit 307200kB, failcnt 81157 [ 3328.512831][T21017] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3328.523697][T21017] Memory cgroup stats for /syz3: [ 3328.524018][T21017] anon 90112 [ 3328.524018][T21017] file 352256 [ 3328.524018][T21017] kernel 314130432 [ 3328.524018][T21017] kernel_stack 65536 [ 3328.524018][T21017] pagetables 69632 [ 3328.524018][T21017] sec_pagetables 0 [ 3328.524018][T21017] percpu 5432256 [ 3328.524018][T21017] sock 0 [ 3328.524018][T21017] vmalloc 8192 [ 3328.524018][T21017] shmem 339968 [ 3328.524018][T21017] zswap 0 [ 3328.524018][T21017] zswapped 0 [ 3328.524018][T21017] file_mapped 327680 [ 3328.524018][T21017] file_dirty 12288 [ 3328.524018][T21017] file_writeback 0 [ 3328.524018][T21017] swapcached 0 [ 3328.524018][T21017] anon_thp 0 [ 3328.524018][T21017] file_thp 0 [ 3328.524018][T21017] shmem_thp 0 [ 3328.524018][T21017] inactive_anon 397312 [ 3328.524018][T21017] active_anon 32768 [ 3328.524018][T21017] inactive_file 8192 [ 3328.524018][T21017] active_file 4096 [ 3328.524018][T21017] unevictable 0 [ 3328.524018][T21017] slab_reclaimable 38392 [ 3328.524018][T21017] slab_unreclaimable 308483352 [ 3328.524018][T21017] slab 308521744 [ 3328.524018][T21017] workingset_refault_anon 0 [ 3328.524018][T21017] workingset_refault_file 2 [ 3328.524018][T21017] workingset_activate_anon 0 [ 3328.524018][T21017] workingset_activate_file 0 [ 3328.524018][T21017] workingset_restore_anon 0 [ 3328.524018][T21017] workingset_restore_file 0 [ 3328.524018][T21017] workingset_nodereclaim 0 [ 3328.524018][T21017] pgscan 55446 [ 3328.524018][T21017] pgsteal 454 [ 3328.524018][T21017] pgscan_kswapd 0 [ 3328.524018][T21017] pgscan_direct 55446 [ 3328.524018][T21017] pgscan_khugepaged 0 [ 3328.524018][T21017] pgsteal_kswapd 0 [ 3328.524018][T21017] pgsteal_direct 454 [ 3328.524018][T21017] pgsteal_khugepaged 0 [ 3328.524018][T21017] pgfault 415762 [ 3328.524018][T21017] pgmajfault 1 [ 3328.524018][T21017] pgrefill 205078 [ 3328.524018][T21017] pgactivate 54983 [ 3328.524018][T21017] pgdeactivate 0 [ 3328.524018][T21017] pglazyfree 0 [ 3328.524018][T21017] pglazyfreed 0 [ 3328.524018][T21017] zswpin 0 [ 3328.524018][T21017] zswpout 0 [ 3328.713250][T21017] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21017,uid=0 [ 3328.731858][T21017] Memory cgroup out of memory: Killed process 21017 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3328.753085][T21024] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3328.764859][T21024] CPU: 0 PID: 21024 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3328.775440][T21024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3328.785556][T21024] Call Trace: [ 3328.788884][T21024] [ 3328.791858][T21024] dump_stack_lvl+0x136/0x150 [ 3328.796602][T21024] dump_header+0x10a/0xd70 [ 3328.801103][T21024] oom_kill_process+0x25d/0x600 [ 3328.806032][T21024] out_of_memory+0x35c/0x1660 [ 3328.810787][T21024] ? oom_killer_disable+0x2b0/0x2b0 [ 3328.816074][T21024] ? rcu_read_unlock+0x9/0x60 [ 3328.820828][T21024] ? find_held_lock+0x2d/0x110 [ 3328.825659][T21024] mem_cgroup_out_of_memory+0x206/0x270 [ 3328.831276][T21024] ? mem_cgroup_margin+0x130/0x130 [ 3328.836447][T21024] ? lock_downgrade+0x690/0x690 [ 3328.841354][T21024] try_charge_memcg+0xf9b/0x13b0 [ 3328.846440][T21024] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3328.852458][T21024] ? rcu_read_unlock+0x9/0x60 [ 3328.857169][T21024] ? lock_downgrade+0x690/0x690 [ 3328.862066][T21024] charge_memcg+0x90/0x3b0 [ 3328.866563][T21024] __mem_cgroup_charge+0x2b/0x90 [ 3328.871549][T21024] do_wp_page+0x8eb/0x3520 [ 3328.876008][T21024] ? lock_release+0x670/0x670 [ 3328.880720][T21024] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3328.886130][T21024] ? do_raw_spin_lock+0x124/0x2b0 [ 3328.891200][T21024] ? spin_bug+0x1c0/0x1c0 [ 3328.895567][T21024] ? lock_downgrade+0x690/0x690 [ 3328.900552][T21024] __handle_mm_fault+0x19a1/0x3e60 [ 3328.905711][T21024] ? vm_iomap_memory+0x190/0x190 [ 3328.910801][T21024] handle_mm_fault+0x2ba/0x9c0 [ 3328.915614][T21024] do_user_addr_fault+0x475/0x1230 [ 3328.920769][T21024] ? rcu_is_watching+0x12/0xb0 [ 3328.925596][T21024] exc_page_fault+0x98/0x170 [ 3328.930332][T21024] asm_exc_page_fault+0x26/0x30 [ 3328.935224][T21024] RIP: 0033:0x7f9ac6239610 [ 3328.939668][T21024] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3328.959321][T21024] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3328.965422][T21024] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3328.973435][T21024] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3328.981430][T21024] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 08:18:55 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="90040000130001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="003800001021000008000d000200000005001000ff00000000041680c400018014000a00f7ffffff00000000ffffff7f0000000010000200ffff0000600a00000900000028000100fdffffffaaaaaaaaaa1400000000000000000000000000000000000000000000000000001000020000100000b90b00000700000040000c8014000100f9ffffffbb0e00007f00000081000000140001000000000084080000ff7f0000810000001400010003000000850400000800000088a800000c00030006000000080000000c000700ffffff7f070000000c0007004c08000007000000d00001802800010001000000bbbbbbbbbbbb00000000000000000000000000000000000000000000000000002800010004000000aaaaaaaaaabb000000000000000000000000000000000000000000000000000054000c8014000100090000008a0f00000000000088a800001400010001000080bd040000060000008100000014000100fcffffff4d0f0000000400008100000014000100030000002f0c000005000000810000001000020053c8000032030000000000000c00030008000000610000000c000700090000000900000004000180240001800c00050000f80100eb01000014000b0049c3101900000000ff0100000000000070000180100006000300000000000100010000002800010004000000aaaaaaaaaa1200000000000000000000000000000000000000000000000000000c000900150000008100000028000100ff070000bbbbbbbbbbbb0000000000000000000000000000000000000000000000000000480001800c00040001010000400000000c00030009000000c30a00001000060003000000ff0f0000ffffffff0c00040001800000ff00000010000600380f000002000000ff010000100101800c000300ffff0000ff0f000014000a00ffff00000000000000000000000000001000020001040000cd0f00000700000090000c8014000100ff030000f00400000001000081000000140001000900000072030000010001008100000014000100ff010000580f00000a0c000088a8000014000100ff000000820b0000030000008100000014000100ffff0000170c00000400000088a80000140001000000000051040000ff070000810000001400010000000000940600000100000088a800000c00030009000000000000000c00030002000000050f000010000600ff01000000040000ff030000100002000800000041080000ea0c000014000b000101000000000000fd010000000000007800018014000a00020000000000000009000000000000000c000400ff010000070000000c000400ff010000ff0100000c000300d0000000020000002800010000800000bbbbbbbbbbbb000000000000000000000000000000000000000000000000000014000a0006000000000000000000000000000000080025000400000008002c0000010000400034801400350070696d726567000000000000000000001400350076657468315f6d616376746170000000140035006361696630000000000000000000000008000f007d0800000800230005000000"], 0x490}, 0x1, 0x0, 0x0, 0x4840}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3328.989424][T21024] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3328.997418][T21024] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3329.005412][T21024] ? __sys_socket+0x7c/0x250 [ 3329.010069][T21024] [ 3329.020332][T21024] memory: usage 307192kB, limit 307200kB, failcnt 70474 [ 3329.043146][T21024] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3329.050677][T21024] Memory cgroup stats for /syz2: [ 3329.050923][T21024] anon 102400 [ 3329.050923][T21024] file 360448 [ 3329.050923][T21024] kernel 314093568 [ 3329.050923][T21024] kernel_stack 65536 [ 3329.050923][T21024] pagetables 69632 [ 3329.050923][T21024] sec_pagetables 0 [ 3329.050923][T21024] percpu 5428704 [ 3329.050923][T21024] sock 0 [ 3329.050923][T21024] vmalloc 0 [ 3329.050923][T21024] shmem 348160 [ 3329.050923][T21024] zswap 0 [ 3329.050923][T21024] zswapped 0 [ 3329.050923][T21024] file_mapped 311296 [ 3329.050923][T21024] file_dirty 4096 [ 3329.050923][T21024] file_writeback 0 [ 3329.050923][T21024] swapcached 0 [ 3329.050923][T21024] anon_thp 0 [ 3329.050923][T21024] file_thp 0 [ 3329.050923][T21024] shmem_thp 0 [ 3329.050923][T21024] inactive_anon 28672 [ 3329.050923][T21024] active_anon 421888 [ 3329.050923][T21024] inactive_file 8192 [ 3329.050923][T21024] active_file 4096 [ 3329.050923][T21024] unevictable 0 [ 3329.050923][T21024] slab_reclaimable 217912 [ 3329.050923][T21024] slab_unreclaimable 308286472 [ 3329.050923][T21024] slab 308504384 [ 3329.050923][T21024] workingset_refault_anon 0 [ 3329.050923][T21024] workingset_refault_file 0 [ 3329.050923][T21024] workingset_activate_anon 0 [ 3329.050923][T21024] workingset_activate_file 0 [ 3329.050923][T21024] workingset_restore_anon 0 [ 3329.050923][T21024] workingset_restore_file 0 [ 3329.050923][T21024] workingset_nodereclaim 0 [ 3329.050923][T21024] pgscan 54431 [ 3329.050923][T21024] pgsteal 459 [ 3329.050923][T21024] pgscan_kswapd 0 [ 3329.050923][T21024] pgscan_direct 54431 [ 3329.050923][T21024] pgscan_khugepaged 0 [ 3329.050923][T21024] pgsteal_kswapd 0 [ 3329.050923][T21024] pgsteal_direct 459 [ 3329.050923][T21024] pgsteal_khugepaged 0 [ 3329.050923][T21024] pgfault 421333 [ 3329.050923][T21024] pgmajfault 1 [ 3329.050923][T21024] pgrefill 180859 [ 3329.050923][T21024] pgactivate 53933 [ 3329.050923][T21024] pgdeactivate 0 [ 3329.050923][T21024] pglazyfree 0 [ 3329.050923][T21024] pglazyfreed 0 [ 3329.050923][T21024] zswpin 0 [ 3329.050923][T21024] zswpout 0 [ 3329.241091][T21024] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21024,uid=0 [ 3329.257683][T21024] Memory cgroup out of memory: Killed process 21024 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8928kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:18:55 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x41510300) 08:18:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfc580300) 08:18:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfffffffffffff000) [ 3329.285716][T21030] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3329.322185][T21030] CPU: 0 PID: 21030 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3329.332694][T21030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3329.342812][T21030] Call Trace: [ 3329.346172][T21030] [ 3329.349159][T21030] dump_stack_lvl+0x136/0x150 [ 3329.353917][T21030] dump_header+0x10a/0xd70 [ 3329.358410][T21030] oom_kill_process+0x25d/0x600 [ 3329.363420][T21030] out_of_memory+0x35c/0x1660 [ 3329.368179][T21030] ? oom_killer_disable+0x2b0/0x2b0 [ 3329.373439][T21030] ? rcu_read_unlock+0x9/0x60 [ 3329.378183][T21030] ? find_held_lock+0x2d/0x110 [ 3329.383056][T21030] mem_cgroup_out_of_memory+0x206/0x270 [ 3329.388678][T21030] ? mem_cgroup_margin+0x130/0x130 [ 3329.393875][T21030] ? lock_downgrade+0x690/0x690 [ 3329.398815][T21030] try_charge_memcg+0xf9b/0x13b0 [ 3329.403832][T21030] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3329.409878][T21030] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3329.415677][T21030] ? lock_downgrade+0x690/0x690 [ 3329.420600][T21030] ? lock_downgrade+0x690/0x690 [ 3329.425617][T21030] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3329.431382][T21030] __alloc_pages+0x1f3/0x4a0 [ 3329.436007][T21030] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3329.442831][T21030] ? __lock_acquire+0xbc5/0x5d40 [ 3329.447904][T21030] alloc_pages+0x1aa/0x270 [ 3329.452369][T21030] __pmd_alloc+0x3f/0x5d0 [ 3329.456750][T21030] __handle_mm_fault+0x932/0x3e60 [ 3329.461819][T21030] ? vm_iomap_memory+0x190/0x190 [ 3329.466837][T21030] handle_mm_fault+0x2ba/0x9c0 [ 3329.471652][T21030] do_user_addr_fault+0x475/0x1230 [ 3329.476902][T21030] ? rcu_is_watching+0x12/0xb0 [ 3329.481708][T21030] exc_page_fault+0x98/0x170 [ 3329.486345][T21030] asm_exc_page_fault+0x26/0x30 [ 3329.491235][T21030] RIP: 0033:0x7f79ea82bde9 [ 3329.495685][T21030] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3329.515441][T21030] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3329.521638][T21030] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3329.529636][T21030] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3329.537633][T21030] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3329.545723][T21030] R10: 00007f79ea400068 R11: 0000000000000246 R12: 000000000032c0cc [ 3329.553726][T21030] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3329.561833][T21030] [ 3329.568458][T21030] memory: usage 307200kB, limit 307200kB, failcnt 76643 [ 3329.580837][T21030] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3329.591110][T21030] Memory cgroup stats for /syz4: [ 3329.591385][T21030] anon 135168 [ 3329.591385][T21030] file 319488 [ 3329.591385][T21030] kernel 314118144 [ 3329.591385][T21030] kernel_stack 65536 [ 3329.591385][T21030] pagetables 69632 [ 3329.591385][T21030] sec_pagetables 0 [ 3329.591385][T21030] percpu 5432320 [ 3329.591385][T21030] sock 0 [ 3329.591385][T21030] vmalloc 0 [ 3329.591385][T21030] shmem 311296 [ 3329.591385][T21030] zswap 0 [ 3329.591385][T21030] zswapped 0 [ 3329.591385][T21030] file_mapped 311296 [ 3329.591385][T21030] file_dirty 4096 [ 3329.591385][T21030] file_writeback 0 [ 3329.591385][T21030] swapcached 0 [ 3329.591385][T21030] anon_thp 0 [ 3329.591385][T21030] file_thp 0 [ 3329.591385][T21030] shmem_thp 0 [ 3329.591385][T21030] inactive_anon 53248 [ 3329.591385][T21030] active_anon 393216 [ 3329.591385][T21030] inactive_file 8192 [ 3329.591385][T21030] active_file 0 [ 3329.591385][T21030] unevictable 0 [ 3329.591385][T21030] slab_reclaimable 16920 [ 3329.591385][T21030] slab_unreclaimable 308498448 [ 3329.591385][T21030] slab 308515368 [ 3329.591385][T21030] workingset_refault_anon 0 [ 3329.591385][T21030] workingset_refault_file 0 [ 3329.591385][T21030] workingset_activate_anon 0 [ 3329.591385][T21030] workingset_activate_file 0 [ 3329.591385][T21030] workingset_restore_anon 0 [ 3329.591385][T21030] workingset_restore_file 0 [ 3329.591385][T21030] workingset_nodereclaim 0 [ 3329.591385][T21030] pgscan 50022 [ 3329.591385][T21030] pgsteal 487 [ 3329.591385][T21030] pgscan_kswapd 0 [ 3329.591385][T21030] pgscan_direct 50022 [ 3329.591385][T21030] pgscan_khugepaged 0 [ 3329.591385][T21030] pgsteal_kswapd 0 [ 3329.591385][T21030] pgsteal_direct 487 [ 3329.591385][T21030] pgsteal_khugepaged 0 [ 3329.591385][T21030] pgfault 404341 [ 3329.591385][T21030] pgmajfault 1 [ 3329.591385][T21030] pgrefill 137380 [ 3329.591385][T21030] pgactivate 49474 [ 3329.591385][T21030] pgdeactivate 0 [ 3329.591385][T21030] pglazyfree 0 [ 3329.591385][T21030] pglazyfreed 0 [ 3329.591385][T21030] zswpin 0 [ 3329.591385][T21030] zswpout 0 [ 3329.790618][T21030] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21030,uid=0 [ 3329.808271][T21030] Memory cgroup out of memory: Killed process 21030 (syz-executor.4) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:56 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcb53030000000000) [ 3329.848293][T21033] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3329.890325][T21033] CPU: 0 PID: 21033 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3329.900834][T21033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3329.911029][T21033] Call Trace: [ 3329.914356][T21033] [ 3329.917325][T21033] dump_stack_lvl+0x136/0x150 [ 3329.922060][T21033] dump_header+0x10a/0xd70 [ 3329.926546][T21033] oom_kill_process+0x25d/0x600 [ 3329.931470][T21033] out_of_memory+0x35c/0x1660 [ 3329.936242][T21033] ? find_held_lock+0x2d/0x110 [ 3329.941088][T21033] ? oom_killer_disable+0x2b0/0x2b0 [ 3329.946349][T21033] ? rcu_read_unlock+0x9/0x60 [ 3329.951090][T21033] ? find_held_lock+0x2d/0x110 [ 3329.955939][T21033] mem_cgroup_out_of_memory+0x206/0x270 [ 3329.961589][T21033] ? mem_cgroup_margin+0x130/0x130 [ 3329.966788][T21033] ? lock_downgrade+0x690/0x690 [ 3329.971837][T21033] try_charge_memcg+0xf9b/0x13b0 [ 3329.976853][T21033] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3329.982925][T21033] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3329.988717][T21033] ? lock_downgrade+0x690/0x690 [ 3329.993620][T21033] ? lock_downgrade+0x690/0x690 [ 3329.998526][T21033] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3330.004128][T21033] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3330.010349][T21033] copy_process+0x4e3/0x7590 [ 3330.014980][T21033] ? folio_flags.constprop.0+0x53/0x150 [ 3330.020568][T21033] ? free_swap_cache+0x1b5/0x3d0 [ 3330.025553][T21033] ? do_wp_page+0x4be/0x3520 [ 3330.030196][T21033] ? __cleanup_sighand+0xb0/0xb0 [ 3330.035282][T21033] ? spin_bug+0x1c0/0x1c0 [ 3330.039683][T21033] ? lock_downgrade+0x690/0x690 [ 3330.044692][T21033] kernel_clone+0xeb/0x890 [ 3330.049162][T21033] ? create_io_thread+0xf0/0xf0 [ 3330.054051][T21033] ? vm_iomap_memory+0x190/0x190 [ 3330.059123][T21033] ? find_held_lock+0x2d/0x110 [ 3330.063964][T21033] __do_sys_clone+0xba/0x100 [ 3330.068590][T21033] ? kernel_clone+0x890/0x890 [ 3330.073337][T21033] ? syscall_enter_from_user_mode+0x26/0x80 [ 3330.079280][T21033] do_syscall_64+0x39/0xb0 [ 3330.083833][T21033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3330.089870][T21033] RIP: 0033:0x7f461ea8d591 [ 3330.094543][T21033] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3330.114192][T21033] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3330.128283][T21033] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3330.136283][T21033] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3330.144325][T21033] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3330.152325][T21033] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3330.160318][T21033] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3330.168335][T21033] [ 3330.194013][T21033] memory: usage 307200kB, limit 307200kB, failcnt 81265 [ 3330.201455][T21033] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3330.209175][T21033] Memory cgroup stats for /syz3: [ 3330.209436][T21033] anon 86016 [ 3330.209436][T21033] file 356352 [ 3330.209436][T21033] kernel 314130432 [ 3330.209436][T21033] kernel_stack 32768 [ 3330.209436][T21033] pagetables 69632 [ 3330.209436][T21033] sec_pagetables 0 [ 3330.209436][T21033] percpu 5432320 [ 3330.209436][T21033] sock 0 [ 3330.209436][T21033] vmalloc 8192 [ 3330.209436][T21033] shmem 339968 [ 3330.209436][T21033] zswap 0 [ 3330.209436][T21033] zswapped 0 [ 3330.209436][T21033] file_mapped 327680 [ 3330.209436][T21033] file_dirty 12288 [ 3330.209436][T21033] file_writeback 0 [ 3330.209436][T21033] swapcached 0 [ 3330.209436][T21033] anon_thp 0 [ 3330.209436][T21033] file_thp 0 [ 3330.209436][T21033] shmem_thp 0 [ 3330.209436][T21033] inactive_anon 393216 [ 3330.209436][T21033] active_anon 32768 [ 3330.209436][T21033] inactive_file 12288 [ 3330.209436][T21033] active_file 4096 [ 3330.209436][T21033] unevictable 0 [ 3330.209436][T21033] slab_reclaimable 36704 [ 3330.209436][T21033] slab_unreclaimable 308494152 [ 3330.209436][T21033] slab 308530856 [ 3330.209436][T21033] workingset_refault_anon 0 [ 3330.209436][T21033] workingset_refault_file 2 [ 3330.209436][T21033] workingset_activate_anon 0 [ 3330.209436][T21033] workingset_activate_file 0 [ 3330.209436][T21033] workingset_restore_anon 0 [ 3330.209436][T21033] workingset_restore_file 0 [ 3330.209436][T21033] workingset_nodereclaim 0 [ 3330.209436][T21033] pgscan 55474 [ 3330.209436][T21033] pgsteal 454 [ 3330.209436][T21033] pgscan_kswapd 0 [ 3330.209436][T21033] pgscan_direct 55474 [ 3330.209436][T21033] pgscan_khugepaged 0 [ 3330.209436][T21033] pgsteal_kswapd 0 [ 3330.209436][T21033] pgsteal_direct 454 [ 3330.209436][T21033] pgsteal_khugepaged 0 [ 3330.209436][T21033] pgfault 415804 [ 3330.209436][T21033] pgmajfault 1 [ 3330.209436][T21033] pgrefill 205303 [ 3330.209436][T21033] pgactivate 55011 [ 3330.209436][T21033] pgdeactivate 0 [ 3330.209436][T21033] pglazyfree 0 [ 3330.209436][T21033] pglazyfreed 0 [ 3330.209436][T21033] zswpin 0 [ 3330.209436][T21033] zswpout 0 [ 3330.400810][T21033] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21033,uid=0 [ 3330.420799][T21033] Memory cgroup out of memory: Killed process 21033 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x20, 0x3, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0xa, 0x42, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3330.446872][T21034] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3330.469966][T21034] CPU: 1 PID: 21034 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3330.480472][T21034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3330.490590][T21034] Call Trace: [ 3330.494117][T21034] [ 3330.497104][T21034] dump_stack_lvl+0x136/0x150 [ 3330.501853][T21034] dump_header+0x10a/0xd70 [ 3330.506429][T21034] oom_kill_process+0x25d/0x600 [ 3330.511356][T21034] out_of_memory+0x35c/0x1660 [ 3330.516110][T21034] ? oom_killer_disable+0x2b0/0x2b0 [ 3330.521397][T21034] ? rcu_read_unlock+0x9/0x60 [ 3330.526157][T21034] ? find_held_lock+0x2d/0x110 [ 3330.531014][T21034] mem_cgroup_out_of_memory+0x206/0x270 [ 3330.536643][T21034] ? mem_cgroup_margin+0x130/0x130 [ 3330.541826][T21034] ? lock_downgrade+0x690/0x690 [ 3330.546852][T21034] try_charge_memcg+0xf9b/0x13b0 [ 3330.551864][T21034] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3330.557920][T21034] ? rcu_read_unlock+0x9/0x60 [ 3330.562668][T21034] ? lock_downgrade+0x690/0x690 [ 3330.567740][T21034] charge_memcg+0x90/0x3b0 [ 3330.572224][T21034] __mem_cgroup_charge+0x2b/0x90 [ 3330.577229][T21034] do_wp_page+0x8eb/0x3520 [ 3330.581728][T21034] ? lock_release+0x670/0x670 [ 3330.586471][T21034] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3330.592185][T21034] ? do_raw_spin_lock+0x124/0x2b0 [ 3330.597280][T21034] ? spin_bug+0x1c0/0x1c0 [ 3330.601676][T21034] ? lock_downgrade+0x690/0x690 [ 3330.606602][T21034] __handle_mm_fault+0x19a1/0x3e60 [ 3330.611814][T21034] ? vm_iomap_memory+0x190/0x190 [ 3330.616983][T21034] handle_mm_fault+0x2ba/0x9c0 [ 3330.621949][T21034] do_user_addr_fault+0x475/0x1230 [ 3330.627155][T21034] ? rcu_is_watching+0x12/0xb0 [ 3330.631995][T21034] exc_page_fault+0x98/0x170 [ 3330.636657][T21034] asm_exc_page_fault+0x26/0x30 [ 3330.641576][T21034] RIP: 0033:0x7f9ac6239610 [ 3330.646045][T21034] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3330.665774][T21034] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3330.671885][T21034] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3330.679938][T21034] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3330.688004][T21034] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f 08:18:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="90040000130001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x490}, 0x1, 0x0, 0x0, 0x4840}, 0x90) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3330.696020][T21034] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3330.704023][T21034] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3330.712291][T21034] ? __x64_sys_socket+0x11/0xb0 [ 3330.717231][T21034] [ 3330.725347][T21034] memory: usage 307200kB, limit 307200kB, failcnt 70558 [ 3330.743964][T21034] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3330.752846][T21034] Memory cgroup stats for /syz2: [ 3330.753130][T21034] anon 98304 [ 3330.753130][T21034] file 364544 [ 3330.753130][T21034] kernel 314109952 [ 3330.753130][T21034] kernel_stack 65536 [ 3330.753130][T21034] pagetables 69632 [ 3330.753130][T21034] sec_pagetables 0 [ 3330.753130][T21034] percpu 5428768 [ 3330.753130][T21034] sock 0 [ 3330.753130][T21034] vmalloc 0 [ 3330.753130][T21034] shmem 348160 [ 3330.753130][T21034] zswap 0 [ 3330.753130][T21034] zswapped 0 [ 3330.753130][T21034] file_mapped 311296 [ 3330.753130][T21034] file_dirty 4096 [ 3330.753130][T21034] file_writeback 0 [ 3330.753130][T21034] swapcached 0 [ 3330.753130][T21034] anon_thp 0 [ 3330.753130][T21034] file_thp 0 [ 3330.753130][T21034] shmem_thp 0 [ 3330.753130][T21034] inactive_anon 405504 [ 3330.753130][T21034] active_anon 40960 [ 3330.753130][T21034] inactive_file 8192 [ 3330.753130][T21034] active_file 8192 [ 3330.753130][T21034] unevictable 0 [ 3330.753130][T21034] slab_reclaimable 218152 [ 3330.753130][T21034] slab_unreclaimable 308298080 [ 3330.753130][T21034] slab 308516232 [ 3330.753130][T21034] workingset_refault_anon 0 [ 3330.753130][T21034] workingset_refault_file 0 [ 3330.753130][T21034] workingset_activate_anon 0 [ 3330.753130][T21034] workingset_activate_file 0 [ 3330.753130][T21034] workingset_restore_anon 0 [ 3330.753130][T21034] workingset_restore_file 0 [ 3330.753130][T21034] workingset_nodereclaim 0 [ 3330.753130][T21034] pgscan 54520 [ 3330.753130][T21034] pgsteal 459 [ 3330.753130][T21034] pgscan_kswapd 0 [ 3330.753130][T21034] pgscan_direct 54520 [ 3330.753130][T21034] pgscan_khugepaged 0 [ 3330.753130][T21034] pgsteal_kswapd 0 [ 3330.753130][T21034] pgsteal_direct 459 [ 3330.753130][T21034] pgsteal_khugepaged 0 [ 3330.753130][T21034] pgfault 421377 [ 3330.753130][T21034] pgmajfault 1 [ 3330.753130][T21034] pgrefill 180918 [ 3330.753130][T21034] pgactivate 54022 [ 3330.753130][T21034] pgdeactivate 0 [ 3330.753130][T21034] pglazyfree 0 [ 3330.753130][T21034] pglazyfreed 0 [ 3330.753130][T21034] zswpin 0 [ 3330.753130][T21034] zswpout 0 [ 3330.943995][T21034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21034,uid=0 [ 3330.959869][T21034] Memory cgroup out of memory: Killed process 21034 (syz-executor.2) total-vm:54548kB, anon-rss:356kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:18:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfcffffff) 08:18:57 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x42010000) [ 3330.995466][T21032] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3331.012380][T21032] CPU: 1 PID: 21032 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3331.022894][T21032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3331.033089][T21032] Call Trace: [ 3331.036427][T21032] [ 3331.039490][T21032] dump_stack_lvl+0x136/0x150 [ 3331.044233][T21032] dump_header+0x10a/0xd70 [ 3331.048719][T21032] oom_kill_process+0x25d/0x600 [ 3331.053653][T21032] out_of_memory+0x35c/0x1660 [ 3331.058413][T21032] ? find_held_lock+0x2d/0x110 [ 3331.063263][T21032] ? oom_killer_disable+0x2b0/0x2b0 [ 3331.068534][T21032] ? rcu_read_unlock+0x9/0x60 [ 3331.073286][T21032] ? find_held_lock+0x2d/0x110 [ 3331.078133][T21032] mem_cgroup_out_of_memory+0x206/0x270 [ 3331.083759][T21032] ? mem_cgroup_margin+0x130/0x130 [ 3331.088940][T21032] ? lock_downgrade+0x690/0x690 [ 3331.093870][T21032] try_charge_memcg+0xf9b/0x13b0 [ 3331.098869][T21032] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3331.104945][T21032] ? rcu_read_unlock+0x9/0x60 [ 3331.109688][T21032] ? lock_downgrade+0x690/0x690 [ 3331.114620][T21032] charge_memcg+0x90/0x3b0 [ 3331.119131][T21032] __mem_cgroup_charge+0x2b/0x90 [ 3331.124125][T21032] ? copy_mc_to_kernel+0x3e/0x90 [ 3331.129242][T21032] do_wp_page+0x8eb/0x3520 [ 3331.133758][T21032] ? lock_release+0x670/0x670 [ 3331.138500][T21032] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3331.143952][T21032] ? do_raw_spin_lock+0x124/0x2b0 [ 3331.149042][T21032] ? spin_bug+0x1c0/0x1c0 [ 3331.153429][T21032] ? lock_downgrade+0x690/0x690 [ 3331.158359][T21032] __handle_mm_fault+0x19a1/0x3e60 [ 3331.163629][T21032] ? vm_iomap_memory+0x190/0x190 [ 3331.168658][T21032] handle_mm_fault+0x2ba/0x9c0 [ 3331.173492][T21032] do_user_addr_fault+0x475/0x1230 [ 3331.178681][T21032] ? rcu_is_watching+0x12/0xb0 [ 3331.183519][T21032] exc_page_fault+0x98/0x170 [ 3331.188172][T21032] asm_exc_page_fault+0x26/0x30 [ 3331.193094][T21032] RIP: 0033:0x7f0e44a366e5 [ 3331.197568][T21032] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3331.217331][T21032] RSP: 002b:00007ffc44a97920 EFLAGS: 00010206 [ 3331.223465][T21032] RAX: 0000000000000003 RBX: 00007f0e44babf80 RCX: 00007f0e44ba80c0 [ 3331.231493][T21032] RDX: 00007f0e44ba80c0 RSI: ffff80f1bb454074 RDI: 00007f0e44babf80 [ 3331.239516][T21032] RBP: 00007f0e44babf80 R08: 0000000000000000 R09: 0000000000000000 [ 3331.247626][T21032] R10: 00007f0e446005f0 R11: 0000000000000000 R12: 00007f0e44babf8c [ 3331.255639][T21032] R13: 00007f0e44600628 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3331.263674][T21032] [ 3331.279356][T21032] memory: usage 307168kB, limit 307200kB, failcnt 73537 [ 3331.286362][T21032] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3331.293768][T21032] Memory cgroup stats for /syz5: [ 3331.294025][T21032] anon 98304 [ 3331.294025][T21032] file 352256 [ 3331.294025][T21032] kernel 314089472 [ 3331.294025][T21032] kernel_stack 32768 [ 3331.294025][T21032] pagetables 81920 [ 3331.294025][T21032] sec_pagetables 0 [ 3331.294025][T21032] percpu 5432688 [ 3331.294025][T21032] sock 0 [ 3331.294025][T21032] vmalloc 20480 [ 3331.294025][T21032] shmem 344064 [ 3331.294025][T21032] zswap 0 [ 3331.294025][T21032] zswapped 0 [ 3331.294025][T21032] file_mapped 327680 [ 3331.294025][T21032] file_dirty 0 [ 3331.294025][T21032] file_writeback 0 [ 3331.294025][T21032] swapcached 0 [ 3331.294025][T21032] anon_thp 0 [ 3331.294025][T21032] file_thp 0 [ 3331.294025][T21032] shmem_thp 0 [ 3331.294025][T21032] inactive_anon 53248 [ 3331.294025][T21032] active_anon 389120 [ 3331.294025][T21032] inactive_file 4096 [ 3331.294025][T21032] active_file 4096 [ 3331.294025][T21032] unevictable 0 [ 3331.294025][T21032] slab_reclaimable 14400 [ 3331.294025][T21032] slab_unreclaimable 308476752 [ 3331.294025][T21032] slab 308491152 [ 3331.294025][T21032] workingset_refault_anon 0 [ 3331.294025][T21032] workingset_refault_file 1 [ 3331.294025][T21032] workingset_activate_anon 0 [ 3331.294025][T21032] workingset_activate_file 0 [ 3331.294025][T21032] workingset_restore_anon 0 [ 3331.294025][T21032] workingset_restore_file 0 [ 3331.294025][T21032] workingset_nodereclaim 0 [ 3331.294025][T21032] pgscan 42746 [ 3331.294025][T21032] pgsteal 452 [ 3331.294025][T21032] pgscan_kswapd 0 [ 3331.294025][T21032] pgscan_direct 42746 [ 3331.294025][T21032] pgscan_khugepaged 0 [ 3331.294025][T21032] pgsteal_kswapd 0 [ 3331.294025][T21032] pgsteal_direct 452 [ 3331.294025][T21032] pgsteal_khugepaged 0 [ 3331.294025][T21032] pgfault 411782 [ 3331.294025][T21032] pgmajfault 0 [ 3331.294025][T21032] pgrefill 140977 [ 3331.294025][T21032] pgactivate 42279 [ 3331.294025][T21032] pgdeactivate 0 [ 3331.294025][T21032] pglazyfree 0 [ 3331.294025][T21032] pglazyfreed 0 [ 3331.294025][T21032] zswpin 0 [ 3331.294025][T21032] zswpout 0 [ 3331.485969][T21032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21032,uid=0 [ 3331.501764][T21032] Memory cgroup out of memory: Killed process 21032 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3331.526922][T21041] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3331.549260][T21041] CPU: 1 PID: 21041 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3331.559781][T21041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3331.569897][T21041] Call Trace: [ 3331.573222][T21041] [ 3331.576233][T21041] dump_stack_lvl+0x136/0x150 [ 3331.580988][T21041] dump_header+0x10a/0xd70 [ 3331.585492][T21041] oom_kill_process+0x25d/0x600 [ 3331.590410][T21041] out_of_memory+0x35c/0x1660 [ 3331.595142][T21041] ? oom_killer_disable+0x2b0/0x2b0 [ 3331.600383][T21041] ? rcu_read_unlock+0x9/0x60 [ 3331.605126][T21041] ? find_held_lock+0x2d/0x110 [ 3331.610114][T21041] mem_cgroup_out_of_memory+0x206/0x270 [ 3331.615706][T21041] ? mem_cgroup_margin+0x130/0x130 [ 3331.620945][T21041] ? lock_downgrade+0x690/0x690 [ 3331.625848][T21041] try_charge_memcg+0xf9b/0x13b0 [ 3331.630830][T21041] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3331.636844][T21041] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3331.642611][T21041] ? lock_downgrade+0x690/0x690 [ 3331.647504][T21041] ? lock_downgrade+0x690/0x690 [ 3331.652397][T21041] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3331.657975][T21041] __alloc_pages+0x1f3/0x4a0 [ 3331.662605][T21041] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3331.669411][T21041] ? __lock_acquire+0xbc5/0x5d40 [ 3331.674417][T21041] alloc_pages+0x1aa/0x270 [ 3331.678902][T21041] __pmd_alloc+0x3f/0x5d0 [ 3331.683268][T21041] __handle_mm_fault+0x932/0x3e60 [ 3331.688336][T21041] ? vm_iomap_memory+0x190/0x190 [ 3331.693332][T21041] handle_mm_fault+0x2ba/0x9c0 [ 3331.698138][T21041] do_user_addr_fault+0x475/0x1230 [ 3331.703374][T21041] ? rcu_is_watching+0x12/0xb0 [ 3331.708177][T21041] exc_page_fault+0x98/0x170 [ 3331.712909][T21041] asm_exc_page_fault+0x26/0x30 [ 3331.717863][T21041] RIP: 0033:0x7f79ea82bde9 [ 3331.722312][T21041] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3331.741960][T21041] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 08:18:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd44b0300) [ 3331.748081][T21041] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3331.756077][T21041] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3331.764129][T21041] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3331.772257][T21041] R10: 00007f79ea400068 R11: 0000000000000246 R12: 000000000032ccc9 [ 3331.780258][T21041] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3331.788306][T21041] [ 3331.845474][T21041] memory: usage 307200kB, limit 307200kB, failcnt 76752 [ 3331.854910][T21041] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3331.862697][T21041] Memory cgroup stats for /syz4: [ 3331.863005][T21041] anon 135168 [ 3331.863005][T21041] file 319488 [ 3331.863005][T21041] kernel 314118144 [ 3331.863005][T21041] kernel_stack 65536 [ 3331.863005][T21041] pagetables 69632 [ 3331.863005][T21041] sec_pagetables 0 [ 3331.863005][T21041] percpu 5432320 [ 3331.863005][T21041] sock 0 [ 3331.863005][T21041] vmalloc 0 [ 3331.863005][T21041] shmem 311296 [ 3331.863005][T21041] zswap 0 [ 3331.863005][T21041] zswapped 0 [ 3331.863005][T21041] file_mapped 311296 [ 3331.863005][T21041] file_dirty 8192 [ 3331.863005][T21041] file_writeback 0 [ 3331.863005][T21041] swapcached 0 [ 3331.863005][T21041] anon_thp 0 [ 3331.863005][T21041] file_thp 0 [ 3331.863005][T21041] shmem_thp 0 [ 3331.863005][T21041] inactive_anon 57344 [ 3331.863005][T21041] active_anon 389120 [ 3331.863005][T21041] inactive_file 4096 [ 3331.863005][T21041] active_file 4096 [ 3331.863005][T21041] unevictable 0 [ 3331.863005][T21041] slab_reclaimable 16920 [ 3331.863005][T21041] slab_unreclaimable 308498448 [ 3331.863005][T21041] slab 308515368 [ 3331.863005][T21041] workingset_refault_anon 0 [ 3331.863005][T21041] workingset_refault_file 0 [ 3331.863005][T21041] workingset_activate_anon 0 [ 3331.863005][T21041] workingset_activate_file 0 [ 3331.863005][T21041] workingset_restore_anon 0 [ 3331.863005][T21041] workingset_restore_file 0 [ 3331.863005][T21041] workingset_nodereclaim 0 [ 3331.863005][T21041] pgscan 50084 [ 3331.863005][T21041] pgsteal 488 [ 3331.863005][T21041] pgscan_kswapd 0 [ 3331.863005][T21041] pgscan_direct 50084 [ 3331.863005][T21041] pgscan_khugepaged 0 [ 3331.863005][T21041] pgsteal_kswapd 0 [ 3331.863005][T21041] pgsteal_direct 488 [ 3331.863005][T21041] pgsteal_khugepaged 0 [ 3331.863005][T21041] pgfault 404402 [ 3331.863005][T21041] pgmajfault 1 [ 3331.863005][T21041] pgrefill 137451 [ 3331.863005][T21041] pgactivate 49535 [ 3331.863005][T21041] pgdeactivate 0 [ 3331.863005][T21041] pglazyfree 0 [ 3331.863005][T21041] pglazyfreed 0 [ 3331.863005][T21041] zswpin 0 [ 3331.863005][T21041] zswpout 0 [ 3332.060522][T21041] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21041,uid=0 [ 3332.076788][T21041] Memory cgroup out of memory: Killed process 21041 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:58 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcc03000000000000) [ 3332.105151][T21042] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3332.129988][T21042] CPU: 0 PID: 21042 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3332.140493][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3332.150616][T21042] Call Trace: [ 3332.153946][T21042] [ 3332.156929][T21042] dump_stack_lvl+0x136/0x150 [ 3332.161673][T21042] dump_header+0x10a/0xd70 [ 3332.166345][T21042] oom_kill_process+0x25d/0x600 [ 3332.171280][T21042] out_of_memory+0x35c/0x1660 [ 3332.176042][T21042] ? oom_killer_disable+0x2b0/0x2b0 [ 3332.181315][T21042] ? rcu_read_unlock+0x9/0x60 [ 3332.186072][T21042] ? find_held_lock+0x2d/0x110 [ 3332.190920][T21042] mem_cgroup_out_of_memory+0x206/0x270 [ 3332.196554][T21042] ? mem_cgroup_margin+0x130/0x130 [ 3332.201740][T21042] ? lock_downgrade+0x690/0x690 [ 3332.206686][T21042] try_charge_memcg+0xf9b/0x13b0 [ 3332.211708][T21042] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3332.217763][T21042] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3332.223573][T21042] ? lock_downgrade+0x690/0x690 [ 3332.228500][T21042] ? lock_downgrade+0x690/0x690 [ 3332.233446][T21042] obj_cgroup_charge+0x2af/0x5e0 [ 3332.238460][T21042] ? vm_area_dup+0x21/0x1f0 [ 3332.243039][T21042] kmem_cache_alloc+0xb1/0x3b0 [ 3332.247907][T21042] vm_area_dup+0x21/0x1f0 08:18:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfd580300) [ 3332.252307][T21042] __split_vma+0x199/0x810 [ 3332.256806][T21042] ? expand_stack+0x20/0x20 [ 3332.261388][T21042] ? vma_shrink+0x5b0/0x5b0 [ 3332.266055][T21042] ? mark_held_locks+0x9f/0xe0 [ 3332.270887][T21042] ? percpu_counter_add_batch+0x199/0x1e0 [ 3332.276723][T21042] ? lockdep_hardirqs_on+0x7d/0x100 [ 3332.282087][T21042] split_vma+0xc6/0x110 [ 3332.286343][T21042] mprotect_fixup+0x771/0xa60 [ 3332.291090][T21042] ? change_protection+0x3b30/0x3b30 [ 3332.296452][T21042] do_mprotect_pkey+0x935/0xc10 [ 3332.301387][T21042] ? mprotect_fixup+0xa60/0xa60 [ 3332.306296][T21042] ? up_write+0x1b4/0x520 [ 3332.310717][T21042] ? xfd_validate_state+0x5d/0x180 [ 3332.315993][T21042] ? kernel_fpu_begin_mask+0x270/0x270 [ 3332.321562][T21042] ? do_futex+0x360/0x360 [ 3332.325980][T21042] __x64_sys_mprotect+0x78/0xb0 [ 3332.330899][T21042] do_syscall_64+0x39/0xb0 [ 3332.335399][T21042] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.341370][T21042] RIP: 0033:0x7faa0ba8c277 [ 3332.345839][T21042] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3332.365506][T21042] RSP: 002b:00007ffd537cca88 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 3332.373948][T21042] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007faa0ba8c277 [ 3332.381976][T21042] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007faa0c891000 [ 3332.389992][T21042] RBP: 00007ffd537ccb60 R08: 00000000ffffffff R09: 00007faa0c8b0700 [ 3332.398011][T21042] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd537ccc80 [ 3332.406128][T21042] R13: 00007faa0c8b0700 R14: 0000000000000000 R15: 0000000000022000 [ 3332.414153][T21042] [ 3332.439359][T21042] memory: usage 307200kB, limit 307200kB, failcnt 93810 [ 3332.446496][T21042] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3332.454063][T21042] Memory cgroup stats for /syz1: [ 3332.454583][T21042] anon 131072 [ 3332.454583][T21042] file 352256 [ 3332.454583][T21042] kernel 314089472 [ 3332.454583][T21042] kernel_stack 65536 [ 3332.454583][T21042] pagetables 81920 [ 3332.454583][T21042] sec_pagetables 0 [ 3332.454583][T21042] percpu 5423968 [ 3332.454583][T21042] sock 0 [ 3332.454583][T21042] vmalloc 16384 [ 3332.454583][T21042] shmem 339968 [ 3332.454583][T21042] zswap 0 [ 3332.454583][T21042] zswapped 0 [ 3332.454583][T21042] file_mapped 262144 [ 3332.454583][T21042] file_dirty 4096 [ 3332.454583][T21042] file_writeback 0 [ 3332.454583][T21042] swapcached 0 [ 3332.454583][T21042] anon_thp 0 [ 3332.454583][T21042] file_thp 0 [ 3332.454583][T21042] shmem_thp 0 [ 3332.454583][T21042] inactive_anon 45056 [ 3332.454583][T21042] active_anon 425984 [ 3332.454583][T21042] inactive_file 8192 [ 3332.454583][T21042] active_file 4096 [ 3332.454583][T21042] unevictable 0 [ 3332.454583][T21042] slab_reclaimable 248984 [ 3332.454583][T21042] slab_unreclaimable 308225152 [ 3332.454583][T21042] slab 308474136 [ 3332.454583][T21042] workingset_refault_anon 0 [ 3332.454583][T21042] workingset_refault_file 4 [ 3332.454583][T21042] workingset_activate_anon 0 [ 3332.454583][T21042] workingset_activate_file 0 [ 3332.454583][T21042] workingset_restore_anon 0 [ 3332.454583][T21042] workingset_restore_file 2 [ 3332.454583][T21042] workingset_nodereclaim 0 [ 3332.454583][T21042] pgscan 78621 [ 3332.454583][T21042] pgsteal 596 [ 3332.454583][T21042] pgscan_kswapd 0 [ 3332.454583][T21042] pgscan_direct 78621 [ 3332.454583][T21042] pgscan_khugepaged 0 [ 3332.454583][T21042] pgsteal_kswapd 0 [ 3332.454583][T21042] pgsteal_direct 596 [ 3332.454583][T21042] pgsteal_khugepaged 0 [ 3332.454583][T21042] pgfault 409654 [ 3332.454583][T21042] pgmajfault 0 [ 3332.454583][T21042] pgrefill 213076 [ 3332.454583][T21042] pgactivate 77932 [ 3332.454583][T21042] pgdeactivate 0 [ 3332.454583][T21042] pglazyfree 0 [ 3332.454583][T21042] pglazyfreed 0 [ 3332.454583][T21042] zswpin 0 [ 3332.454583][T21042] zswpout 0 [ 3332.646370][T21042] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21042,uid=0 [ 3332.665702][T21042] Memory cgroup out of memory: Killed process 21042 (syz-executor.1) total-vm:54680kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3332.688369][T21044] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3332.703857][T21044] CPU: 0 PID: 21044 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3332.714342][T21044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3332.724422][T21044] Call Trace: [ 3332.727719][T21044] [ 3332.730675][T21044] dump_stack_lvl+0x136/0x150 [ 3332.735540][T21044] dump_header+0x10a/0xd70 [ 3332.740006][T21044] oom_kill_process+0x25d/0x600 [ 3332.744898][T21044] out_of_memory+0x35c/0x1660 [ 3332.749624][T21044] ? oom_killer_disable+0x2b0/0x2b0 [ 3332.754858][T21044] ? rcu_read_unlock+0x9/0x60 [ 3332.759574][T21044] ? find_held_lock+0x2d/0x110 [ 3332.764419][T21044] mem_cgroup_out_of_memory+0x206/0x270 [ 3332.770042][T21044] ? mem_cgroup_margin+0x130/0x130 [ 3332.775215][T21044] ? lock_downgrade+0x690/0x690 [ 3332.780148][T21044] try_charge_memcg+0xf9b/0x13b0 [ 3332.785138][T21044] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3332.791153][T21044] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3332.796945][T21044] ? lock_downgrade+0x690/0x690 [ 3332.802039][T21044] ? lock_downgrade+0x690/0x690 [ 3332.806951][T21044] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3332.812533][T21044] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3332.818817][T21044] copy_process+0x4e3/0x7590 [ 3332.823448][T21044] ? __lock_acquire+0xbc5/0x5d40 [ 3332.828432][T21044] ? __cleanup_sighand+0xb0/0xb0 [ 3332.833408][T21044] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3332.839429][T21044] ? psi_memstall_leave+0x174/0x250 [ 3332.844673][T21044] ? lock_downgrade+0x690/0x690 [ 3332.849585][T21044] kernel_clone+0xeb/0x890 [ 3332.854067][T21044] ? create_io_thread+0xf0/0xf0 [ 3332.858966][T21044] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3332.865256][T21044] ? lock_downgrade+0x690/0x690 [ 3332.870329][T21044] __do_sys_clone+0xba/0x100 [ 3332.874963][T21044] ? kernel_clone+0x890/0x890 [ 3332.879696][T21044] ? syscall_enter_from_user_mode+0x26/0x80 [ 3332.885828][T21044] do_syscall_64+0x39/0xb0 [ 3332.890299][T21044] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3332.896236][T21044] RIP: 0033:0x7f461ea8d591 [ 3332.900765][T21044] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3332.920418][T21044] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3332.928872][T21044] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3332.937050][T21044] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3332.945051][T21044] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 08:18:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x20, 0x3, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0xa, 0x42, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x20, 0x3, 0xffffffffffffffff}) (async) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) (async) pipe(&(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0xa, 0x42, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) [ 3332.953050][T21044] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3332.961133][T21044] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3332.969155][T21044] [ 3332.972686][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 3332.983164][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 3332.994815][T21044] memory: usage 307184kB, limit 307200kB, failcnt 81390 [ 3333.001971][T21044] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3333.008986][T21044] Memory cgroup stats for /syz3: [ 3333.009258][T21044] anon 86016 [ 3333.009258][T21044] file 360448 [ 3333.009258][T21044] kernel 314109952 [ 3333.009258][T21044] kernel_stack 32768 [ 3333.009258][T21044] pagetables 69632 [ 3333.009258][T21044] sec_pagetables 0 [ 3333.009258][T21044] percpu 5432256 [ 3333.009258][T21044] sock 0 [ 3333.009258][T21044] vmalloc 8192 [ 3333.009258][T21044] shmem 339968 [ 3333.009258][T21044] zswap 0 [ 3333.009258][T21044] zswapped 0 [ 3333.009258][T21044] file_mapped 327680 [ 3333.009258][T21044] file_dirty 16384 [ 3333.009258][T21044] file_writeback 0 [ 3333.009258][T21044] swapcached 0 [ 3333.009258][T21044] anon_thp 0 [ 3333.009258][T21044] file_thp 0 [ 3333.009258][T21044] shmem_thp 0 [ 3333.009258][T21044] inactive_anon 32768 [ 3333.009258][T21044] active_anon 393216 [ 3333.009258][T21044] inactive_file 0 [ 3333.009258][T21044] active_file 20480 [ 3333.009258][T21044] unevictable 0 [ 3333.009258][T21044] slab_reclaimable 36944 [ 3333.009258][T21044] slab_unreclaimable 308482240 [ 3333.009258][T21044] slab 308519184 [ 3333.009258][T21044] workingset_refault_anon 0 [ 3333.009258][T21044] workingset_refault_file 2 [ 3333.009258][T21044] workingset_activate_anon 0 [ 3333.009258][T21044] workingset_activate_file 0 [ 3333.009258][T21044] workingset_restore_anon 0 [ 3333.009258][T21044] workingset_restore_file 0 [ 3333.009258][T21044] workingset_nodereclaim 0 [ 3333.009258][T21044] pgscan 55593 [ 3333.009258][T21044] pgsteal 454 [ 3333.009258][T21044] pgscan_kswapd 0 [ 3333.009258][T21044] pgscan_direct 55593 [ 3333.009258][T21044] pgscan_khugepaged 0 [ 3333.009258][T21044] pgsteal_kswapd 0 [ 3333.009258][T21044] pgsteal_direct 454 [ 3333.009258][T21044] pgsteal_khugepaged 0 [ 3333.009258][T21044] pgfault 415846 [ 3333.009258][T21044] pgmajfault 1 [ 3333.009258][T21044] pgrefill 205770 [ 3333.009258][T21044] pgactivate 55130 [ 3333.009258][T21044] pgdeactivate 0 [ 3333.009258][T21044] pglazyfree 0 [ 3333.009258][T21044] pglazyfreed 0 [ 3333.009258][T21044] zswpin 0 [ 3333.009258][T21044] zswpout 0 [ 3333.206259][T21044] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21044,uid=0 [ 3333.232175][T21044] Memory cgroup out of memory: Killed process 21044 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:18:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfe580300) [ 3333.333825][T21047] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3333.364827][T21047] CPU: 1 PID: 21047 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3333.375339][T21047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3333.385728][T21047] Call Trace: [ 3333.389054][T21047] [ 3333.392031][T21047] dump_stack_lvl+0x136/0x150 [ 3333.396770][T21047] dump_header+0x10a/0xd70 [ 3333.401262][T21047] oom_kill_process+0x25d/0x600 [ 3333.406193][T21047] out_of_memory+0x35c/0x1660 [ 3333.411475][T21047] ? find_held_lock+0x2d/0x110 [ 3333.416336][T21047] ? oom_killer_disable+0x2b0/0x2b0 [ 3333.421609][T21047] ? rcu_read_unlock+0x9/0x60 [ 3333.426351][T21047] ? find_held_lock+0x2d/0x110 [ 3333.431206][T21047] mem_cgroup_out_of_memory+0x206/0x270 [ 3333.436828][T21047] ? mem_cgroup_margin+0x130/0x130 [ 3333.442019][T21047] ? lock_downgrade+0x690/0x690 [ 3333.446956][T21047] try_charge_memcg+0xf9b/0x13b0 [ 3333.451991][T21047] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3333.458041][T21047] ? rcu_read_unlock+0x9/0x60 [ 3333.462801][T21047] ? lock_downgrade+0x690/0x690 [ 3333.467736][T21047] charge_memcg+0x90/0x3b0 [ 3333.472213][T21047] __mem_cgroup_charge+0x2b/0x90 [ 3333.477206][T21047] do_wp_page+0x8eb/0x3520 [ 3333.481691][T21047] ? lock_release+0x670/0x670 [ 3333.486427][T21047] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3333.491873][T21047] ? do_raw_spin_lock+0x124/0x2b0 [ 3333.496978][T21047] ? spin_bug+0x1c0/0x1c0 [ 3333.501455][T21047] ? lock_downgrade+0x690/0x690 [ 3333.506419][T21047] __handle_mm_fault+0x19a1/0x3e60 [ 3333.511611][T21047] ? vm_iomap_memory+0x190/0x190 [ 3333.516645][T21047] handle_mm_fault+0x2ba/0x9c0 [ 3333.521517][T21047] do_user_addr_fault+0x475/0x1230 [ 3333.526717][T21047] ? rcu_is_watching+0x12/0xb0 [ 3333.531557][T21047] exc_page_fault+0x98/0x170 [ 3333.536253][T21047] asm_exc_page_fault+0x26/0x30 [ 3333.541169][T21047] RIP: 0033:0x7f9ac6239610 [ 3333.545640][T21047] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3333.565309][T21047] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3333.571437][T21047] RAX: 00000000889da1a8 RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 08:19:00 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x175667cb, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3333.579645][T21047] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000a21e666 [ 3333.587672][T21047] RBP: 00000000889da1a8 R08: 00000000000001a8 R09: 00000000889da1ac [ 3333.595787][T21047] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3333.603814][T21047] R13: 0000000000000001 R14: 0000000000000009 R15: ffffffff83d3eb42 [ 3333.611842][T21047] ? apparmor_socket_create+0x22/0x670 [ 3333.617400][T21047] [ 3333.651235][T21047] memory: usage 307200kB, limit 307200kB, failcnt 70689 [ 3333.658595][T21047] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3333.666668][T21047] Memory cgroup stats for /syz2: [ 3333.666986][T21047] anon 118784 [ 3333.666986][T21047] file 360448 [ 3333.666986][T21047] kernel 314093568 [ 3333.666986][T21047] kernel_stack 65536 [ 3333.666986][T21047] pagetables 69632 [ 3333.666986][T21047] sec_pagetables 0 [ 3333.666986][T21047] percpu 5428704 [ 3333.666986][T21047] sock 0 [ 3333.666986][T21047] vmalloc 0 [ 3333.666986][T21047] shmem 348160 [ 3333.666986][T21047] zswap 0 [ 3333.666986][T21047] zswapped 0 [ 3333.666986][T21047] file_mapped 311296 [ 3333.666986][T21047] file_dirty 12288 [ 3333.666986][T21047] file_writeback 0 [ 3333.666986][T21047] swapcached 0 [ 3333.666986][T21047] anon_thp 0 [ 3333.666986][T21047] file_thp 0 [ 3333.666986][T21047] shmem_thp 0 [ 3333.666986][T21047] inactive_anon 49152 [ 3333.666986][T21047] active_anon 417792 [ 3333.666986][T21047] inactive_file 8192 [ 3333.666986][T21047] active_file 4096 [ 3333.666986][T21047] unevictable 0 [ 3333.666986][T21047] slab_reclaimable 217912 [ 3333.666986][T21047] slab_unreclaimable 308286168 [ 3333.666986][T21047] slab 308504080 [ 3333.666986][T21047] workingset_refault_anon 0 [ 3333.666986][T21047] workingset_refault_file 0 [ 3333.666986][T21047] workingset_activate_anon 0 [ 3333.666986][T21047] workingset_activate_file 0 [ 3333.666986][T21047] workingset_restore_anon 0 [ 3333.666986][T21047] workingset_restore_file 0 [ 3333.666986][T21047] workingset_nodereclaim 0 [ 3333.666986][T21047] pgscan 54596 [ 3333.666986][T21047] pgsteal 461 [ 3333.666986][T21047] pgscan_kswapd 0 [ 3333.666986][T21047] pgscan_direct 54596 [ 3333.666986][T21047] pgscan_khugepaged 0 [ 3333.666986][T21047] pgsteal_kswapd 0 [ 3333.666986][T21047] pgsteal_direct 461 [ 3333.666986][T21047] pgsteal_khugepaged 0 [ 3333.666986][T21047] pgfault 421431 [ 3333.666986][T21047] pgmajfault 1 [ 3333.666986][T21047] pgrefill 181117 [ 3333.666986][T21047] pgactivate 54096 [ 3333.666986][T21047] pgdeactivate 0 [ 3333.666986][T21047] pglazyfree 0 [ 3333.666986][T21047] pglazyfreed 0 [ 3333.666986][T21047] zswpin 0 08:19:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfeff0000) [ 3333.666986][T21047] zswpout 0 [ 3333.857782][T21047] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21047,uid=0 [ 3333.877330][T21047] Memory cgroup out of memory: Killed process 21047 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:00 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x42510300) [ 3333.909122][T21054] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3333.919686][T21054] CPU: 0 PID: 21054 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3333.930165][T21054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3333.940277][T21054] Call Trace: [ 3333.943600][T21054] [ 3333.946581][T21054] dump_stack_lvl+0x136/0x150 [ 3333.951330][T21054] dump_header+0x10a/0xd70 [ 3333.955865][T21054] oom_kill_process+0x25d/0x600 [ 3333.960795][T21054] out_of_memory+0x35c/0x1660 [ 3333.965560][T21054] ? oom_killer_disable+0x2b0/0x2b0 [ 3333.970831][T21054] ? rcu_read_unlock+0x9/0x60 [ 3333.975591][T21054] ? find_held_lock+0x2d/0x110 [ 3333.980445][T21054] mem_cgroup_out_of_memory+0x206/0x270 [ 3333.986070][T21054] ? mem_cgroup_margin+0x130/0x130 [ 3333.991268][T21054] ? lock_downgrade+0x690/0x690 [ 3333.996205][T21054] try_charge_memcg+0xf9b/0x13b0 [ 3334.001244][T21054] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3334.007295][T21054] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3334.013100][T21054] ? lock_downgrade+0x690/0x690 [ 3334.018023][T21054] ? lock_downgrade+0x690/0x690 [ 3334.022966][T21054] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3334.028582][T21054] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3334.034795][T21054] copy_process+0x13a7/0x7590 [ 3334.039515][T21054] ? __lock_acquire+0xbc5/0x5d40 [ 3334.044499][T21054] ? __cleanup_sighand+0xb0/0xb0 [ 3334.049471][T21054] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3334.055495][T21054] ? psi_memstall_leave+0x174/0x250 [ 3334.060734][T21054] ? lock_downgrade+0x690/0x690 [ 3334.065631][T21054] kernel_clone+0xeb/0x890 [ 3334.070119][T21054] ? create_io_thread+0xf0/0xf0 [ 3334.075030][T21054] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3334.081332][T21054] ? lock_downgrade+0x690/0x690 [ 3334.086230][T21054] __do_sys_clone+0xba/0x100 [ 3334.090856][T21054] ? kernel_clone+0x890/0x890 [ 3334.095583][T21054] ? syscall_enter_from_user_mode+0x26/0x80 [ 3334.101526][T21054] do_syscall_64+0x39/0xb0 [ 3334.106000][T21054] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3334.111932][T21054] RIP: 0033:0x7faa0ba8d591 [ 3334.116373][T21054] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3334.136038][T21054] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3334.144481][T21054] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3334.152481][T21054] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3334.160483][T21054] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3334.168479][T21054] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3334.176478][T21054] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3334.184500][T21054] [ 3334.196099][T21054] memory: usage 307200kB, limit 307200kB, failcnt 93949 [ 3334.206312][T21054] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3334.213659][T21054] Memory cgroup stats for /syz1: [ 3334.213930][T21054] anon 102400 [ 3334.213930][T21054] file 352256 [ 3334.213930][T21054] kernel 314118144 [ 3334.213930][T21054] kernel_stack 65536 [ 3334.213930][T21054] pagetables 81920 [ 3334.213930][T21054] sec_pagetables 0 [ 3334.213930][T21054] percpu 5424032 [ 3334.213930][T21054] sock 0 [ 3334.213930][T21054] vmalloc 16384 [ 3334.213930][T21054] shmem 339968 [ 3334.213930][T21054] zswap 0 [ 3334.213930][T21054] zswapped 0 [ 3334.213930][T21054] file_mapped 262144 [ 3334.213930][T21054] file_dirty 4096 [ 3334.213930][T21054] file_writeback 0 [ 3334.213930][T21054] swapcached 0 [ 3334.213930][T21054] anon_thp 0 [ 3334.213930][T21054] file_thp 0 [ 3334.213930][T21054] shmem_thp 0 [ 3334.213930][T21054] inactive_anon 45056 [ 3334.213930][T21054] active_anon 397312 [ 3334.213930][T21054] inactive_file 8192 [ 3334.213930][T21054] active_file 4096 [ 3334.213930][T21054] unevictable 0 [ 3334.213930][T21054] slab_reclaimable 248984 [ 3334.213930][T21054] slab_unreclaimable 308245424 [ 3334.213930][T21054] slab 308494408 [ 3334.213930][T21054] workingset_refault_anon 0 [ 3334.213930][T21054] workingset_refault_file 4 [ 3334.213930][T21054] workingset_activate_anon 0 [ 3334.213930][T21054] workingset_activate_file 0 [ 3334.213930][T21054] workingset_restore_anon 0 [ 3334.213930][T21054] workingset_restore_file 2 [ 3334.213930][T21054] workingset_nodereclaim 0 [ 3334.213930][T21054] pgscan 78715 [ 3334.213930][T21054] pgsteal 597 [ 3334.213930][T21054] pgscan_kswapd 0 [ 3334.213930][T21054] pgscan_direct 78715 [ 3334.213930][T21054] pgscan_khugepaged 0 [ 3334.213930][T21054] pgsteal_kswapd 0 [ 3334.213930][T21054] pgsteal_direct 597 [ 3334.213930][T21054] pgsteal_khugepaged 0 [ 3334.213930][T21054] pgfault 409697 [ 3334.213930][T21054] pgmajfault 0 [ 3334.213930][T21054] pgrefill 213173 [ 3334.213930][T21054] pgactivate 78025 [ 3334.213930][T21054] pgdeactivate 0 [ 3334.213930][T21054] pglazyfree 0 [ 3334.213930][T21054] pglazyfreed 0 [ 3334.213930][T21054] zswpin 0 [ 3334.213930][T21054] zswpout 0 08:19:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x20, 0x3, 0xffffffffffffffff}) ioctl$BTRFS_IOC_BALANCE_CTL(r1, 0x40049421, 0x1) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r2, 0x0, r3, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getneightbl={0xa, 0x42, 0x8, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3334.407339][T21054] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21054,uid=0 [ 3334.424376][T21054] Memory cgroup out of memory: Killed process 21054 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3334.504602][T21049] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3334.541669][T21049] CPU: 0 PID: 21049 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 08:19:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfeffffff) [ 3334.552172][T21049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3334.562282][T21049] Call Trace: [ 3334.565608][T21049] [ 3334.568583][T21049] dump_stack_lvl+0x136/0x150 [ 3334.573318][T21049] dump_header+0x10a/0xd70 [ 3334.574923][T21052] warn_alloc: 1 callbacks suppressed [ 3334.574944][T21052] syz-executor.4: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3334.583070][T21049] oom_kill_process+0x25d/0x600 [ 3334.583122][T21049] out_of_memory+0x35c/0x1660 [ 3334.610434][T21049] ? find_held_lock+0x2d/0x110 [ 3334.615282][T21049] ? oom_killer_disable+0x2b0/0x2b0 [ 3334.620557][T21049] ? rcu_read_unlock+0x9/0x60 [ 3334.625398][T21049] ? find_held_lock+0x2d/0x110 [ 3334.630258][T21049] mem_cgroup_out_of_memory+0x206/0x270 [ 3334.635966][T21049] ? mem_cgroup_margin+0x130/0x130 [ 3334.641159][T21049] ? lock_downgrade+0x690/0x690 [ 3334.646272][T21049] try_charge_memcg+0xf9b/0x13b0 [ 3334.646602][T21052] ,cpuset= [ 3334.651505][T21049] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3334.651551][T21049] ? rcu_read_unlock+0x9/0x60 [ 3334.654839][T21052] syz4 [ 3334.660602][T21049] ? lock_downgrade+0x690/0x690 [ 3334.672668][T21052] ,mems_allowed=0-1 [ 3334.672837][T21049] charge_memcg+0x90/0x3b0 [ 3334.672890][T21049] __mem_cgroup_charge+0x2b/0x90 [ 3334.676983][T21052] [ 3334.681181][T21049] ? copy_mc_to_kernel+0x3e/0x90 [ 3334.681240][T21049] do_wp_page+0x8eb/0x3520 [ 3334.698005][T21049] ? lock_release+0x670/0x670 [ 3334.702732][T21049] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3334.708163][T21049] ? do_raw_spin_lock+0x124/0x2b0 [ 3334.713252][T21049] ? spin_bug+0x1c0/0x1c0 [ 3334.717636][T21049] ? lock_downgrade+0x690/0x690 [ 3334.722549][T21049] __handle_mm_fault+0x19a1/0x3e60 [ 3334.727755][T21049] ? vm_iomap_memory+0x190/0x190 [ 3334.732777][T21049] handle_mm_fault+0x2ba/0x9c0 [ 3334.737593][T21049] do_user_addr_fault+0x475/0x1230 [ 3334.742784][T21049] ? rcu_is_watching+0x12/0xb0 [ 3334.747605][T21049] exc_page_fault+0x98/0x170 [ 3334.752245][T21049] asm_exc_page_fault+0x26/0x30 [ 3334.757149][T21049] RIP: 0033:0x7f0e44a366e5 [ 3334.761605][T21049] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3334.781263][T21049] RSP: 002b:00007ffc44a97920 EFLAGS: 00010206 [ 3334.787373][T21049] RAX: 0000000000000003 RBX: 00007f0e44babf80 RCX: 00007f0e44ba80c0 [ 3334.795379][T21049] RDX: 00007f0e44ba80c0 RSI: ffff80f1bb454074 RDI: 00007f0e44babf80 [ 3334.803382][T21049] RBP: 00007f0e44babf80 R08: 0000000000000000 R09: 0000000000000000 [ 3334.811659][T21049] R10: 00007f0e446005f0 R11: 0000000000000000 R12: 00007f0e44babf8c [ 3334.819681][T21049] R13: 00007f0e44600628 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3334.827728][T21049] [ 3334.841504][T21052] CPU: 1 PID: 21052 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3334.852011][T21052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3334.862299][T21052] Call Trace: [ 3334.865625][T21052] [ 3334.868600][T21052] dump_stack_lvl+0x136/0x150 [ 3334.872669][T21049] memory: usage 307200kB, limit 307200kB, failcnt 73672 [ 3334.873319][T21052] warn_alloc+0x213/0x360 [ 3334.873366][T21052] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3334.880537][T21049] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3334.884649][T21052] ? find_held_lock+0x2d/0x110 [ 3334.892209][T21049] Memory cgroup stats for [ 3334.897085][T21052] ? lock_downgrade+0x690/0x690 [ 3334.897130][T21052] ? mark_held_locks+0x9f/0xe0 [ 3334.897179][T21052] __vmalloc_node_range+0x1021/0x14a0 [ 3334.897240][T21052] ? alloc_netdev_mqs+0x9c/0x1250 [ 3334.902944][T21049] /syz5 [ 3334.906439][T21052] ? delayed_vfree_work+0x70/0x70 [ 3334.912291][T21049] : [ 3334.916036][T21052] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3334.916102][T21052] ? kvmalloc_node+0x76/0x1a0 [ 3334.931923][T21049] anon 98304 [ 3334.931923][T21049] file 352256 [ 3334.931923][T21049] kernel 314089472 [ 3334.931923][T21049] kernel_stack 32768 [ 3334.931923][T21049] pagetables 81920 [ 3334.931923][T21049] sec_pagetables 0 [ 3334.931923][T21049] percpu 5432688 [ 3334.931923][T21049] sock 0 [ 3334.931923][T21049] vmalloc 20480 [ 3334.931923][T21049] shmem 344064 [ 3334.931923][T21049] zswap 0 [ 3334.931923][T21049] zswapped 0 [ 3334.931923][T21049] file_mapped 327680 [ 3334.931923][T21049] file_dirty 4096 [ 3334.931923][T21049] file_writeback 0 [ 3334.931923][T21049] swapcached 0 [ 3334.931923][T21049] anon_thp 0 [ 3334.931923][T21049] file_thp 0 [ 3334.931923][T21049] shmem_thp 0 [ 3334.931923][T21049] inactive_anon 36864 [ 3334.931923][T21049] active_anon 405504 [ 3334.931923][T21049] inactive_file 4096 [ 3334.931923][T21049] active_file 4096 [ 3334.931923][T21049] unevictable 0 [ 3334.931923][T21049] slab_reclaimable 14400 [ 3334.931923][T21049] slab_unreclaimable 308476752 [ 3334.931923][T21049] slab 308491152 [ 3334.931923][T21049] workingset_refault_anon 0 [ 3334.931923][T21049] workingset_refault_file 1 [ 3334.931923][T21049] workingset_activate_anon 0 [ 3334.931923][T21049] workingset_activate_file 0 [ 3334.931923][T21049] workingset_restore_anon 0 [ 3334.931923][T21049] workingset_restore_file 0 [ 3334.931923][T21049] workingset_nodereclaim 0 [ 3334.931923][T21049] pgscan 42815 [ 3334.931923][T21049] pgsteal 453 [ 3334.931923][T21049] pgscan_kswapd 0 [ 3334.931923][T21049] pgscan_direct 42815 [ 3334.931923][T21049] pgscan_khugepaged 0 [ 3334.931923][T21049] pgsteal_kswapd 0 [ 3334.931923][T21049] pgsteal_direct 453 [ 3334.931923][T21049] pgsteal_khugepaged 0 [ 3334.931923][T21049] pgfault 411827 [ 3334.931923][T21049] pgmajfault 0 [ 3334.931923][T21049] pgrefill 141073 [ 3334.931923][T21049] pgactivate 42347 [ 3334.931923][T21049] pgdeactivate 0 [ 3334.931923][T21049] pglazyfree 0 [ 3334.931923][T21049] pglazyfreed 0 [ 3334.931923][T21049] zswpin 0 [ 3334.931923][T21049] zswpout 0 [ 3334.934669][T21052] ? rcu_is_watching+0x12/0xb0 [ 3334.934723][T21052] ? alloc_netdev_mqs+0x9c/0x1250 [ 3334.950429][T21049] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3335.128681][T21052] kvmalloc_node+0x156/0x1a0 [ 3335.128729][T21052] ? alloc_netdev_mqs+0x9c/0x1250 [ 3335.128770][T21052] alloc_netdev_mqs+0x9c/0x1250 [ 3335.128803][T21052] ? security_capable+0x93/0xc0 [ 3335.128834][T21052] ? br_netpoll_disable+0x60/0x60 [ 3335.128874][T21052] rtnl_create_link+0xbeb/0xee0 [ 3335.128919][T21052] __rtnl_newlink+0xfd4/0x1840 [ 3335.128979][T21052] ? rtnl_link_unregister+0x250/0x250 [ 3335.129049][T21052] ? rtnl_newlink+0x4a/0xa0 [ 3335.129103][T21052] rtnl_newlink+0x68/0xa0 [ 3335.129146][T21052] ? __rtnl_newlink+0x1840/0x1840 [ 3335.129190][T21052] rtnetlink_rcv_msg+0x43d/0xd50 [ 3335.129239][T21052] ? rtnl_stats_set+0x4d0/0x4d0 [ 3335.129279][T21052] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3335.129349][T21052] netlink_rcv_skb+0x165/0x440 [ 3335.129391][T21052] ? rtnl_stats_set+0x4d0/0x4d0 [ 3335.129438][T21052] ? netlink_ack+0x1360/0x1360 [ 3335.129501][T21052] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3335.129551][T21052] netlink_unicast+0x547/0x7f0 [ 3335.129597][T21052] ? netlink_attachskb+0x890/0x890 [ 3335.129636][T21052] ? __virt_addr_valid+0x61/0x2e0 [ 3335.129684][T21052] ? __phys_addr_symbol+0x30/0x70 [ 3335.129728][T21052] ? __check_object_size+0x333/0x6e0 [ 3335.129776][T21052] netlink_sendmsg+0x925/0xe30 [ 3335.129826][T21052] ? netlink_unicast+0x7f0/0x7f0 [ 3335.129876][T21052] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3335.129920][T21052] ? netlink_unicast+0x7f0/0x7f0 [ 3335.129964][T21052] sock_sendmsg+0xde/0x190 [ 3335.130008][T21052] ____sys_sendmsg+0x71c/0x900 [ 3335.130052][T21052] ? copy_msghdr_from_user+0xfc/0x150 [ 3335.130104][T21052] ? kernel_sendmsg+0x50/0x50 [ 3335.130152][T21052] ? futex_unqueue+0xb7/0x120 [ 3335.130203][T21052] ? futex_wait+0x503/0x680 [ 3335.130255][T21052] ___sys_sendmsg+0x110/0x1b0 [ 3335.130308][T21052] ? do_recvmmsg+0x6e0/0x6e0 [ 3335.130371][T21052] ? __fget_files+0x248/0x480 [ 3335.183310][T21049] ,cpuset= [ 3335.186511][T21052] ? lock_downgrade+0x690/0x690 [ 3335.186572][T21052] ? __fget_files+0x26a/0x480 [ 3335.186634][T21052] ? __fget_light+0xe5/0x270 [ 3335.186694][T21052] __sys_sendmsg+0xf7/0x1c0 [ 3335.192176][T21049] syz5 [ 3335.195511][T21052] ? __sys_sendmsg_sock+0x40/0x40 [ 3335.205368][T21049] ,mems_allowed=0-1 [ 3335.205470][T21052] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3335.211028][T21049] ,oom_memcg= [ 3335.215779][T21052] ? syscall_enter_from_user_mode+0x26/0x80 [ 3335.215831][T21052] ? lockdep_hardirqs_on+0x7d/0x100 [ 3335.225806][T21049] /syz5 [ 3335.230227][T21052] do_syscall_64+0x39/0xb0 [ 3335.245395][T21049] ,task_memcg=/syz5 [ 3335.250426][T21052] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3335.261453][T21049] ,task=syz-executor.5,pid=21049,uid=0 [ 3335.265517][T21052] RIP: 0033:0x7f79ea88c169 [ 3335.265552][T21052] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3335.265586][T21052] RSP: 002b:00007f79eb505168 EFLAGS: 00000246 [ 3335.270890][T21049] Memory cgroup out of memory: Killed process 21049 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3335.275835][T21052] ORIG_RAX: 000000000000002e [ 3335.275851][T21052] RAX: ffffffffffffffda RBX: 00007f79ea9abf80 RCX: 00007f79ea88c169 08:19:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd54b0300) [ 3335.275876][T21052] RDX: cc03000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3335.275899][T21052] RBP: 00007f79ea8e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3335.286893][T21061] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3335.290030][T21052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3335.290056][T21052] R13: 00007ffd939e5d3f R14: 00007f79eb505300 R15: 0000000000022000 [ 3335.290105][T21052] [ 3335.505407][T21061] CPU: 0 PID: 21061 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3335.515970][T21061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3335.526081][T21061] Call Trace: [ 3335.529412][T21061] [ 3335.532400][T21061] dump_stack_lvl+0x136/0x150 [ 3335.537146][T21061] dump_header+0x10a/0xd70 [ 3335.541709][T21061] oom_kill_process+0x25d/0x600 [ 3335.546644][T21061] out_of_memory+0x35c/0x1660 [ 3335.549195][T21052] Mem-Info: [ 3335.551369][T21061] ? oom_killer_disable+0x2b0/0x2b0 [ 3335.551424][T21061] ? rcu_read_unlock+0x9/0x60 [ 3335.554692][T21052] active_anon:82459 inactive_anon:1073 isolated_anon:0 [ 3335.554692][T21052] active_file:18 inactive_file:15592 isolated_file:0 [ 3335.554692][T21052] unevictable:768 dirty:25 writeback:0 [ 3335.554692][T21052] slab_reclaimable:30937 slab_unreclaimable:953981 [ 3335.554692][T21052] mapped:19747 shmem:2084 pagetables:683 [ 3335.554692][T21052] sec_pagetables:0 bounce:0 [ 3335.554692][T21052] kernel_misc_reclaimable:0 [ 3335.554692][T21052] free:450854 free_pcp:15779 free_cma:0 [ 3335.559861][T21061] ? find_held_lock+0x2d/0x110 [ 3335.559923][T21061] mem_cgroup_out_of_memory+0x206/0x270 [ 3335.559973][T21061] ? mem_cgroup_margin+0x130/0x130 [ 3335.564799][T21052] Node 0 active_anon:329460kB inactive_anon:3712kB active_file:8kB inactive_file:57540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 3335.609866][T21061] ? lock_downgrade+0x690/0x690 [ 3335.609930][T21061] try_charge_memcg+0xf9b/0x13b0 [ 3335.609969][T21061] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3335.610009][T21061] ? rcu_read_unlock+0x9/0x60 [ 3335.619091][T21052] Node 1 active_anon:376kB inactive_anon:580kB active_file:64kB inactive_file:4828kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:48kB writeback:0kB shmem:1904kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:524kB pagetables:384kB sec_pagetables:0kB all_unreclaimable? no [ 3335.620395][T21061] ? lock_downgrade+0x690/0x690 [ 3335.620453][T21061] charge_memcg+0x90/0x3b0 [ 3335.626009][T21052] Node 0 [ 3335.658284][T21061] __mem_cgroup_charge+0x2b/0x90 [ 3335.658326][T21061] do_wp_page+0x8eb/0x3520 [ 3335.658374][T21061] ? lock_release+0x670/0x670 [ 3335.658414][T21061] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3335.658452][T21061] ? do_raw_spin_lock+0x124/0x2b0 [ 3335.658490][T21061] ? spin_bug+0x1c0/0x1c0 [ 3335.658524][T21061] ? lock_downgrade+0x690/0x690 [ 3335.658570][T21061] __handle_mm_fault+0x19a1/0x3e60 [ 3335.658616][T21061] ? vm_iomap_memory+0x190/0x190 [ 3335.658694][T21061] handle_mm_fault+0x2ba/0x9c0 [ 3335.658744][T21061] do_user_addr_fault+0x475/0x1230 [ 3335.658802][T21061] ? rcu_is_watching+0x12/0xb0 [ 3335.658852][T21061] exc_page_fault+0x98/0x170 [ 3335.658893][T21061] asm_exc_page_fault+0x26/0x30 [ 3335.658933][T21061] RIP: 0033:0x7f9ac6239610 [ 3335.658960][T21061] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3335.658990][T21061] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3335.659016][T21061] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3335.659050][T21061] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3335.659070][T21061] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3335.659092][T21061] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3335.659116][T21061] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3335.659138][T21061] ? __x64_sys_socket+0x11/0xb0 [ 3335.659201][T21061] [ 3335.759357][T21061] memory: usage 307200kB, limit 307200kB, failcnt 70809 [ 3335.805933][T21052] DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 3335.822514][T21061] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3335.836176][T21052] lowmem_reserve[]: [ 3335.844021][T21061] Memory cgroup stats for [ 3335.868202][T21052] 0 2617 2619 2619 2619 [ 3335.868267][T21052] Node 0 DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:329420kB inactive_anon:3708kB active_file:8kB inactive_file:55964kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:38532kB local_pcp:20332kB free_cma:0kB [ 3335.868368][T21052] lowmem_reserve[]: 0 0 1 1 1 [ 3335.868425][T21052] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3335.868519][T21052] lowmem_reserve[]: 0 0 0 0 0 [ 3335.868578][T21052] Node 1 Normal free:1748496kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:376kB inactive_anon:580kB active_file:64kB inactive_file:4828kB unevictable:1536kB writepending:48kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:24588kB local_pcp:3380kB free_cma:0kB [ 3335.876359][T21061] /syz2 [ 3335.878314][T21052] lowmem_reserve[]: [ 3335.885574][T21061] : [ 3335.913176][T21052] 0 [ 3335.928318][T21061] anon 98304 [ 3335.928318][T21061] file 364544 [ 3335.928318][T21061] kernel 314109952 [ 3335.928318][T21061] kernel_stack 65536 [ 3335.928318][T21061] pagetables 69632 [ 3335.928318][T21061] sec_pagetables 0 [ 3335.928318][T21061] percpu 5428768 [ 3335.928318][T21061] sock 0 [ 3335.928318][T21061] vmalloc 0 [ 3335.928318][T21061] shmem 348160 [ 3335.928318][T21061] zswap 0 [ 3335.928318][T21061] zswapped 0 [ 3335.928318][T21061] file_mapped 311296 [ 3335.928318][T21061] file_dirty 12288 [ 3335.928318][T21061] file_writeback 0 [ 3335.928318][T21061] swapcached 0 [ 3335.928318][T21061] anon_thp 0 [ 3335.928318][T21061] file_thp 0 [ 3335.928318][T21061] shmem_thp 0 [ 3335.928318][T21061] inactive_anon 45056 [ 3335.928318][T21061] active_anon 401408 [ 3335.928318][T21061] inactive_file 8192 [ 3335.928318][T21061] active_file 8192 [ 3335.928318][T21061] unevictable 0 [ 3335.928318][T21061] slab_reclaimable 218152 [ 3335.928318][T21061] slab_unreclaimable 308298080 [ 3335.928318][T21061] slab 308516232 [ 3335.928318][T21061] workingset_refault_anon 0 [ 3335.928318][T21061] workingset_refault_file 0 [ 3335.928318][T21061] workingset_activate_anon 0 [ 3335.928318][T21061] workingset_activate_file 0 [ 3335.928318][T21061] workingset_restore_anon 0 [ 3335.928318][T21061] workingset_restore_file 0 [ 3335.928318][T21061] workingset_nodereclaim 0 [ 3335.928318][T21061] pgscan 54635 [ 3335.928318][T21061] pgsteal 461 [ 3335.928318][T21061] pgscan_kswapd 0 [ 3335.928318][T21061] pgscan_direct 54635 [ 3335.928318][T21061] pgscan_khugepaged 0 [ 3335.928318][T21061] pgsteal_kswapd 0 [ 3335.928318][T21061] pgsteal_direct 461 [ 3335.928318][T21061] pgsteal_khugepaged 0 [ 3335.928318][T21061] pgfault 421475 [ 3335.928318][T21061] pgmajfault 1 [ 3335.928318][T21061] pgrefill 181369 [ 3335.928318][T21061] pgactivate 54135 [ 3335.928318][T21061] pgdeactivate 0 [ 3335.928318][T21061] pglazyfree 0 [ 3335.928318][T21061] pglazyfreed 0 [ 3335.928318][T21061] zswpin 0 [ 3335.928318][T21061] zswpout 0 [ 3335.931845][T21052] 0 [ 3335.984126][T21061] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3335.997550][T21052] 0 [ 3336.239747][T21061] ,cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21061,uid=0 08:19:02 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x43510300) [ 3336.256019][T21061] Memory cgroup out of memory: Killed process 21061 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xff0f0000) [ 3336.332412][T21071] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3336.371230][T21071] CPU: 1 PID: 21071 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3336.381738][T21071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3336.391858][T21071] Call Trace: [ 3336.395182][T21071] [ 3336.398160][T21071] dump_stack_lvl+0x136/0x150 [ 3336.402907][T21071] dump_header+0x10a/0xd70 [ 3336.407399][T21071] oom_kill_process+0x25d/0x600 [ 3336.412332][T21071] out_of_memory+0x35c/0x1660 [ 3336.417092][T21071] ? find_held_lock+0x2d/0x110 [ 3336.421948][T21071] ? oom_killer_disable+0x2b0/0x2b0 [ 3336.427232][T21071] ? rcu_read_unlock+0x9/0x60 [ 3336.432022][T21071] ? find_held_lock+0x2d/0x110 [ 3336.436881][T21071] mem_cgroup_out_of_memory+0x206/0x270 [ 3336.442522][T21071] ? mem_cgroup_margin+0x130/0x130 [ 3336.447709][T21071] ? lock_downgrade+0x690/0x690 [ 3336.452660][T21071] try_charge_memcg+0xf9b/0x13b0 [ 3336.457666][T21071] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3336.463731][T21071] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3336.469547][T21071] ? lock_downgrade+0x690/0x690 [ 3336.474491][T21071] ? lock_downgrade+0x690/0x690 [ 3336.479445][T21071] obj_cgroup_charge+0x2af/0x5e0 [ 3336.484458][T21071] ? sock_alloc_inode+0x27/0x1d0 [ 3336.489470][T21071] kmem_cache_alloc_lru+0x142/0x600 [ 3336.494766][T21071] sock_alloc_inode+0x27/0x1d0 [ 3336.499617][T21071] ? sock_free_inode+0x30/0x30 [ 3336.504454][T21071] alloc_inode+0x61/0x230 [ 3336.508865][T21071] new_inode_pseudo+0x17/0x80 [ 3336.513619][T21071] sock_alloc+0x40/0x270 [ 3336.517935][T21071] __sock_create+0xbd/0x850 [ 3336.522509][T21071] ? xfd_validate_state+0x5d/0x180 [ 3336.526806][T21052] 0 [ 3336.527872][T21071] __sys_socket+0x133/0x250 [ 3336.527928][T21071] ? __sys_socket_file+0x1d0/0x1d0 [ 3336.530438][T21052] 0 [ 3336.535065][T21071] __x64_sys_socket+0x73/0xb0 [ 3336.547500][T21071] do_syscall_64+0x39/0xb0 [ 3336.552001][T21071] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3336.557971][T21071] RIP: 0033:0x7f0e44a8c169 [ 3336.562472][T21071] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3336.568982][T21052] Node 0 [ 3336.582116][T21071] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3336.582155][T21071] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3336.582178][T21071] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3336.582197][T21071] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3336.582216][T21071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3336.582237][T21071] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3336.582280][T21071] [ 3336.638557][T21071] memory: usage 307200kB, limit 307200kB, failcnt 73778 [ 3336.647913][T21071] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3336.664181][T21071] Memory cgroup stats for /syz5: [ 3336.664486][T21071] anon 90112 [ 3336.664486][T21071] file 356352 [ 3336.664486][T21071] kernel 314126336 [ 3336.664486][T21071] kernel_stack 65536 [ 3336.664486][T21071] pagetables 73728 [ 3336.664486][T21071] sec_pagetables 0 [ 3336.664486][T21071] percpu 5432752 [ 3336.664486][T21071] sock 0 [ 3336.664486][T21071] vmalloc 20480 [ 3336.664486][T21071] shmem 344064 [ 3336.664486][T21071] zswap 0 [ 3336.664486][T21071] zswapped 0 [ 3336.664486][T21071] file_mapped 327680 [ 3336.664486][T21071] file_dirty 4096 [ 3336.664486][T21071] file_writeback 0 [ 3336.664486][T21071] swapcached 0 [ 3336.664486][T21071] anon_thp 0 [ 3336.664486][T21071] file_thp 0 [ 3336.664486][T21071] shmem_thp 0 [ 3336.664486][T21071] inactive_anon 40960 [ 3336.664486][T21071] active_anon 393216 [ 3336.664486][T21071] inactive_file 8192 [ 3336.664486][T21071] active_file 4096 [ 3336.664486][T21071] unevictable 0 [ 3336.664486][T21071] slab_reclaimable 12712 [ 3336.664486][T21071] slab_unreclaimable 308487616 [ 3336.664486][T21071] slab 308500328 [ 3336.664486][T21071] workingset_refault_anon 0 [ 3336.664486][T21071] workingset_refault_file 1 [ 3336.664486][T21071] workingset_activate_anon 0 [ 3336.664486][T21071] workingset_activate_file 0 [ 3336.664486][T21071] workingset_restore_anon 0 [ 3336.664486][T21071] workingset_restore_file 0 [ 3336.664486][T21071] workingset_nodereclaim 0 [ 3336.664486][T21071] pgscan 42897 [ 3336.664486][T21071] pgsteal 453 [ 3336.664486][T21071] pgscan_kswapd 0 [ 3336.664486][T21071] pgscan_direct 42897 [ 3336.664486][T21071] pgscan_khugepaged 0 [ 3336.664486][T21071] pgsteal_kswapd 0 [ 3336.664486][T21071] pgsteal_direct 453 [ 3336.664486][T21071] pgsteal_khugepaged 0 [ 3336.664486][T21071] pgfault 411870 [ 3336.664486][T21071] pgmajfault 0 [ 3336.664486][T21071] pgrefill 141155 [ 3336.664486][T21071] pgactivate 42429 [ 3336.664486][T21071] pgdeactivate 0 [ 3336.664486][T21071] pglazyfree 0 [ 3336.664486][T21071] pglazyfreed 0 [ 3336.664486][T21071] zswpin 0 [ 3336.664486][T21071] zswpout 0 [ 3336.668426][T21052] DMA: [ 3336.682686][T21071] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3336.856188][T21052] 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3336.899703][T21052] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) 24*128kB (UME) 14*256kB (UME) 6*512kB (UM) 10*1024kB (UM) 6*2048kB (M) 0*4096kB = 44180kB [ 3336.910286][T21071] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21068,uid=0 [ 3336.918442][T21052] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3336.939295][T21071] Memory cgroup out of memory: Killed process 21068 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3336.943172][T21052] Node 1 Normal: 2*4kB (UE) 165*8kB (M) 296*16kB (UME) 95*32kB (ME) 131*64kB (UME) 112*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1748048kB [ 3336.982524][T21052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.003045][T21052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3337.029550][T21052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3337.066995][T21052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3337.088271][T21076] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3337.106252][T21076] CPU: 1 PID: 21076 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3337.106341][T21052] 17703 total pagecache pages [ 3337.116720][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3337.116741][T21076] Call Trace: [ 3337.116750][T21076] [ 3337.116762][T21076] dump_stack_lvl+0x136/0x150 [ 3337.116802][T21076] dump_header+0x10a/0xd70 [ 3337.116845][T21076] oom_kill_process+0x25d/0x600 [ 3337.116885][T21076] out_of_memory+0x35c/0x1660 [ 3337.116928][T21076] ? find_held_lock+0x2d/0x110 [ 3337.116978][T21076] ? oom_killer_disable+0x2b0/0x2b0 [ 3337.117015][T21076] ? rcu_read_unlock+0x9/0x60 [ 3337.117054][T21076] ? find_held_lock+0x2d/0x110 [ 3337.117105][T21076] mem_cgroup_out_of_memory+0x206/0x270 [ 3337.117150][T21076] ? mem_cgroup_margin+0x130/0x130 [ 3337.117189][T21076] ? lock_downgrade+0x690/0x690 [ 3337.117241][T21076] try_charge_memcg+0xf9b/0x13b0 [ 3337.117280][T21076] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3337.117312][T21076] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3337.117360][T21076] ? lock_downgrade+0x690/0x690 [ 3337.117399][T21076] ? lock_downgrade+0x690/0x690 [ 3337.143231][T21052] 0 pages in swap cache [ 3337.147527][T21076] obj_cgroup_charge+0x2af/0x5e0 [ 3337.147570][T21076] ? sock_alloc_inode+0x27/0x1d0 [ 3337.147609][T21076] kmem_cache_alloc_lru+0x142/0x600 [ 3337.147666][T21076] sock_alloc_inode+0x27/0x1d0 [ 3337.147711][T21076] ? sock_free_inode+0x30/0x30 [ 3337.147745][T21076] alloc_inode+0x61/0x230 [ 3337.164584][T21052] Free swap = 0kB [ 3337.167280][T21076] new_inode_pseudo+0x17/0x80 [ 3337.167335][T21076] sock_alloc+0x40/0x270 08:19:03 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcc53030000000000) 08:19:03 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x175667cb, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) 08:19:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd64b0300) 08:19:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xff580300) [ 3337.167376][T21076] __sock_create+0xbd/0x850 [ 3337.167414][T21076] ? xfd_validate_state+0x5d/0x180 [ 3337.167458][T21076] __sys_socket+0x133/0x250 [ 3337.167498][T21076] ? __sys_socket_file+0x1d0/0x1d0 [ 3337.167552][T21076] __x64_sys_socket+0x73/0xb0 [ 3337.184042][T21052] Total swap = 0kB [ 3337.187648][T21076] do_syscall_64+0x39/0xb0 [ 3337.187710][T21076] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3337.187752][T21076] RIP: 0033:0x7faa0ba8c169 [ 3337.187777][T21076] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3337.194281][T21052] 2097051 pages RAM [ 3337.197571][T21076] RSP: 002b:00007faa0c8b0168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3337.197605][T21076] RAX: ffffffffffffffda RBX: 00007faa0bbac050 RCX: 00007faa0ba8c169 [ 3337.197627][T21076] RDX: 000000000000002c RSI: 0000000000000003 RDI: 000000000000000a [ 3337.197645][T21076] RBP: 00007faa0bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3337.197663][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3337.197681][T21076] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3337.197732][T21076] [ 3337.229224][T21076] memory: usage 307200kB, limit 307200kB, failcnt 94152 [ 3337.236199][T21052] 0 pages HighMem/MovableOnly [ 3337.240287][T21076] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3337.246666][T21052] 392115 pages reserved [ 3337.249975][T21076] Memory cgroup stats for [ 3337.253451][T21052] 0 pages cma reserved 08:19:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xff7f0000) [ 3337.572101][T21076] /syz1: [ 3337.572447][T21076] anon 102400 [ 3337.572447][T21076] file 352256 [ 3337.572447][T21076] kernel 314118144 [ 3337.572447][T21076] kernel_stack 98304 [ 3337.572447][T21076] pagetables 81920 [ 3337.572447][T21076] sec_pagetables 0 [ 3337.572447][T21076] percpu 5423968 [ 3337.572447][T21076] sock 0 [ 3337.572447][T21076] vmalloc 16384 [ 3337.572447][T21076] shmem 339968 [ 3337.572447][T21076] zswap 0 [ 3337.572447][T21076] zswapped 0 [ 3337.572447][T21076] file_mapped 262144 [ 3337.572447][T21076] file_dirty 8192 [ 3337.572447][T21076] file_writeback 0 [ 3337.572447][T21076] swapcached 0 [ 3337.572447][T21076] anon_thp 0 [ 3337.572447][T21076] file_thp 0 [ 3337.572447][T21076] shmem_thp 0 [ 3337.572447][T21076] inactive_anon 49152 [ 3337.572447][T21076] active_anon 393216 [ 3337.572447][T21076] inactive_file 8192 [ 3337.572447][T21076] active_file 4096 [ 3337.572447][T21076] unevictable 0 [ 3337.572447][T21076] slab_reclaimable 245368 [ 3337.572447][T21076] slab_unreclaimable 308226944 [ 3337.572447][T21076] slab 308472312 [ 3337.572447][T21076] workingset_refault_anon 0 [ 3337.572447][T21076] workingset_refault_file 4 [ 3337.572447][T21076] workingset_activate_anon 0 [ 3337.572447][T21076] workingset_activate_file 0 [ 3337.572447][T21076] workingset_restore_anon 0 [ 3337.572447][T21076] workingset_restore_file 2 [ 3337.572447][T21076] workingset_nodereclaim 0 [ 3337.572447][T21076] pgscan 78873 [ 3337.572447][T21076] pgsteal 598 [ 3337.572447][T21076] pgscan_kswapd 0 [ 3337.572447][T21076] pgscan_direct 78873 [ 3337.572447][T21076] pgscan_khugepaged 0 [ 3337.572447][T21076] pgsteal_kswapd 0 08:19:04 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcd53030000000000) [ 3337.572447][T21076] pgsteal_direct 598 [ 3337.572447][T21076] pgsteal_khugepaged 0 [ 3337.572447][T21076] pgfault 409740 [ 3337.572447][T21076] pgmajfault 0 [ 3337.572447][T21076] pgrefill 213402 [ 3337.572447][T21076] pgactivate 78182 [ 3337.572447][T21076] pgdeactivate 0 [ 3337.572447][T21076] pglazyfree 0 [ 3337.572447][T21076] pglazyfreed 0 [ 3337.572447][T21076] zswpin 0 [ 3337.572447][T21076] zswpout 0 [ 3337.775475][T21076] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21066,uid=0 [ 3337.795281][T21076] Memory cgroup out of memory: Killed process 21066 (syz-executor.1) total-vm:50972kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3337.813432][T21072] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3337.833800][T21072] CPU: 1 PID: 21072 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3337.844296][T21072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3337.854379][T21072] Call Trace: [ 3337.857671][T21072] [ 3337.860612][T21072] dump_stack_lvl+0x136/0x150 [ 3337.865339][T21072] dump_header+0x10a/0xd70 [ 3337.869799][T21072] oom_kill_process+0x25d/0x600 [ 3337.874706][T21072] out_of_memory+0x35c/0x1660 [ 3337.879533][T21072] ? oom_killer_disable+0x2b0/0x2b0 [ 3337.884778][T21072] ? rcu_read_unlock+0x9/0x60 [ 3337.889514][T21072] ? find_held_lock+0x2d/0x110 [ 3337.894340][T21072] mem_cgroup_out_of_memory+0x206/0x270 [ 3337.899938][T21072] ? mem_cgroup_margin+0x130/0x130 [ 3337.905087][T21072] ? lock_downgrade+0x690/0x690 [ 3337.910333][T21072] try_charge_memcg+0xf9b/0x13b0 [ 3337.915305][T21072] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3337.921320][T21072] ? rcu_read_unlock+0x9/0x60 [ 3337.926043][T21072] ? lock_downgrade+0x690/0x690 [ 3337.930966][T21072] charge_memcg+0x90/0x3b0 [ 3337.935422][T21072] __mem_cgroup_charge+0x2b/0x90 [ 3337.940395][T21072] do_wp_page+0x8eb/0x3520 [ 3337.944848][T21072] ? lock_release+0x670/0x670 [ 3337.949567][T21072] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3337.955000][T21072] ? do_raw_spin_lock+0x124/0x2b0 [ 3337.960070][T21072] ? spin_bug+0x1c0/0x1c0 [ 3337.964423][T21072] ? lock_downgrade+0x690/0x690 [ 3337.969306][T21072] __handle_mm_fault+0x19a1/0x3e60 [ 3337.974507][T21072] ? vm_iomap_memory+0x190/0x190 [ 3337.979531][T21072] handle_mm_fault+0x2ba/0x9c0 [ 3337.984339][T21072] do_user_addr_fault+0x475/0x1230 [ 3337.989493][T21072] ? rcu_is_watching+0x12/0xb0 [ 3337.994302][T21072] exc_page_fault+0x98/0x170 [ 3337.998926][T21072] asm_exc_page_fault+0x26/0x30 [ 3338.003807][T21072] RIP: 0033:0x7f9ac6239610 [ 3338.008254][T21072] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3338.027987][T21072] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 08:19:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r2, &(0x7f0000001780)={&(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x3}, &(0x7f00000015c0)=0x2, &(0x7f0000001600)=0x2000, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x10, 0x100000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x1000}, &(0x7f0000001640)=0x2e8, &(0x7f0000001680)=0x1ff, 0x8, 0xfffffffffffffffe, 0xfff, 0x6, 0x20, 0x3}}], 0xb0, 0x4000000}, 0x4800) write$binfmt_elf32(r2, 0x0, 0x3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000280)="94f4fe47aca727b6d67b113a42473f5dfff33cfc1f2b5732c15bf27f4514fe558e0da842d2fdf92c1da5dc45e2eedf0a16ec58fee49ade5e8a2673c04a3f1b90a45e374240fed0c7080485d1a3c49bf714ff893fa9ee4a2aabd954027246e1", 0x5f, 0x44, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r4, 0x0, r5, 0x0, 0x4ff9c, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@multicast1}, {@initdev}, {@loopback}, {}]}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="0000e06b3484aeaa346f32f0e612808000018062726964676500000c00028008001d0000001aa91f3af0c30879fe10b732d3000037807df151a7c6bd87ab712a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000200000012bbd7000fedbdf250a8020690900000013000100080010003f00000014000100fc0100000000000000000000000000001400010000000000000000000000000000000000140001002001000000000000000000000006000114000200fe8000000000000000000000000000aa08000e000600000014000100fe8000000000000000000000000000bb"], 0x90}, 0x1, 0x0, 0x0, 0x22008004}, 0x8000) [ 3338.034084][T21072] RAX: 00000000010d554f RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3338.042085][T21072] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c3a95 [ 3338.050124][T21072] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3338.058121][T21072] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3338.066116][T21072] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3338.074115][T21072] ? __sys_socket+0x7c/0x250 [ 3338.078786][T21072] [ 3338.106149][T21072] memory: usage 307200kB, limit 307200kB, failcnt 70907 [ 3338.121457][T21072] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3338.132694][T21072] Memory cgroup stats for /syz2: [ 3338.133026][T21072] anon 102400 [ 3338.133026][T21072] file 360448 [ 3338.133026][T21072] kernel 314109952 [ 3338.133026][T21072] kernel_stack 65536 [ 3338.133026][T21072] pagetables 69632 [ 3338.133026][T21072] sec_pagetables 0 [ 3338.133026][T21072] percpu 5428768 [ 3338.133026][T21072] sock 0 [ 3338.133026][T21072] vmalloc 0 [ 3338.133026][T21072] shmem 348160 [ 3338.133026][T21072] zswap 0 [ 3338.133026][T21072] zswapped 0 [ 3338.133026][T21072] file_mapped 311296 [ 3338.133026][T21072] file_dirty 12288 [ 3338.133026][T21072] file_writeback 0 [ 3338.133026][T21072] swapcached 0 [ 3338.133026][T21072] anon_thp 0 [ 3338.133026][T21072] file_thp 0 [ 3338.133026][T21072] shmem_thp 0 [ 3338.133026][T21072] inactive_anon 32768 [ 3338.133026][T21072] active_anon 417792 [ 3338.133026][T21072] inactive_file 8192 [ 3338.133026][T21072] active_file 4096 [ 3338.133026][T21072] unevictable 0 [ 3338.133026][T21072] slab_reclaimable 217912 [ 3338.133026][T21072] slab_unreclaimable 308298080 [ 3338.133026][T21072] slab 308515992 [ 3338.133026][T21072] workingset_refault_anon 0 [ 3338.133026][T21072] workingset_refault_file 0 [ 3338.133026][T21072] workingset_activate_anon 0 [ 3338.133026][T21072] workingset_activate_file 0 [ 3338.133026][T21072] workingset_restore_anon 0 [ 3338.133026][T21072] workingset_restore_file 0 [ 3338.133026][T21072] workingset_nodereclaim 0 [ 3338.133026][T21072] pgscan 54660 [ 3338.133026][T21072] pgsteal 462 [ 3338.133026][T21072] pgscan_kswapd 0 [ 3338.133026][T21072] pgscan_direct 54660 [ 3338.133026][T21072] pgscan_khugepaged 0 [ 3338.133026][T21072] pgsteal_kswapd 0 [ 3338.133026][T21072] pgsteal_direct 462 [ 3338.133026][T21072] pgsteal_khugepaged 0 [ 3338.133026][T21072] pgfault 421521 [ 3338.133026][T21072] pgmajfault 1 [ 3338.133026][T21072] pgrefill 181576 [ 3338.133026][T21072] pgactivate 54159 [ 3338.133026][T21072] pgdeactivate 0 [ 3338.133026][T21072] pglazyfree 0 [ 3338.133026][T21072] pglazyfreed 0 [ 3338.133026][T21072] zswpin 0 [ 3338.133026][T21072] zswpout 0 [ 3338.323215][T21072] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21072,uid=0 [ 3338.339024][T21072] Memory cgroup out of memory: Killed process 21072 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x44020000) [ 3338.360569][T21077] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3338.381213][T21077] CPU: 1 PID: 21077 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3338.391739][T21077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3338.401937][T21077] Call Trace: [ 3338.405260][T21077] [ 3338.408234][T21077] dump_stack_lvl+0x136/0x150 [ 3338.412980][T21077] dump_header+0x10a/0xd70 [ 3338.417481][T21077] oom_kill_process+0x25d/0x600 [ 3338.422411][T21077] out_of_memory+0x35c/0x1660 [ 3338.427175][T21077] ? oom_killer_disable+0x2b0/0x2b0 [ 3338.432462][T21077] ? rcu_read_unlock+0x9/0x60 [ 3338.437213][T21077] ? find_held_lock+0x2d/0x110 [ 3338.442066][T21077] mem_cgroup_out_of_memory+0x206/0x270 [ 3338.447704][T21077] ? mem_cgroup_margin+0x130/0x130 [ 3338.452877][T21077] ? lock_downgrade+0x690/0x690 [ 3338.457819][T21077] try_charge_memcg+0xf9b/0x13b0 [ 3338.462903][T21077] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3338.468922][T21077] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3338.474691][T21077] ? lock_downgrade+0x690/0x690 [ 3338.479596][T21077] ? lock_downgrade+0x690/0x690 [ 3338.484488][T21077] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3338.490069][T21077] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3338.496375][T21077] copy_process+0x13a7/0x7590 [ 3338.501095][T21077] ? __lock_acquire+0xbc5/0x5d40 [ 3338.506095][T21077] ? __cleanup_sighand+0xb0/0xb0 [ 3338.511103][T21077] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3338.517160][T21077] ? psi_memstall_leave+0x174/0x250 [ 3338.522431][T21077] ? lock_downgrade+0x690/0x690 [ 3338.527352][T21077] kernel_clone+0xeb/0x890 [ 3338.531842][T21077] ? create_io_thread+0xf0/0xf0 [ 3338.536775][T21077] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3338.543107][T21077] ? lock_downgrade+0x690/0x690 [ 3338.548007][T21077] __do_sys_clone+0xba/0x100 [ 3338.552643][T21077] ? kernel_clone+0x890/0x890 [ 3338.557403][T21077] ? syscall_enter_from_user_mode+0x26/0x80 [ 3338.563360][T21077] do_syscall_64+0x39/0xb0 [ 3338.567826][T21077] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3338.573760][T21077] RIP: 0033:0x7f461ea8d591 [ 3338.578204][T21077] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3338.597969][T21077] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3338.606440][T21077] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3338.614652][T21077] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3338.622735][T21077] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3338.630758][T21077] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3338.638959][T21077] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3338.646989][T21077] [ 3338.652692][T21077] memory: usage 307200kB, limit 307200kB, failcnt 81654 [ 3338.665908][T21077] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3338.673310][T21077] Memory cgroup stats for /syz3: [ 3338.673575][T21077] anon 86016 [ 3338.673575][T21077] file 364544 [ 3338.673575][T21077] kernel 314122240 [ 3338.673575][T21077] kernel_stack 32768 [ 3338.673575][T21077] pagetables 69632 [ 3338.673575][T21077] sec_pagetables 0 [ 3338.673575][T21077] percpu 5432256 [ 3338.673575][T21077] sock 0 [ 3338.673575][T21077] vmalloc 8192 [ 3338.673575][T21077] shmem 339968 [ 3338.673575][T21077] zswap 0 [ 3338.673575][T21077] zswapped 0 [ 3338.673575][T21077] file_mapped 327680 [ 3338.673575][T21077] file_dirty 20480 [ 3338.673575][T21077] file_writeback 0 [ 3338.673575][T21077] swapcached 0 [ 3338.673575][T21077] anon_thp 0 [ 3338.673575][T21077] file_thp 0 [ 3338.673575][T21077] shmem_thp 0 [ 3338.673575][T21077] inactive_anon 40960 [ 3338.673575][T21077] active_anon 385024 [ 3338.673575][T21077] inactive_file 0 [ 3338.673575][T21077] active_file 24576 [ 3338.673575][T21077] unevictable 0 [ 3338.673575][T21077] slab_reclaimable 37184 [ 3338.673575][T21077] slab_unreclaimable 308482240 [ 3338.673575][T21077] slab 308519424 [ 3338.673575][T21077] workingset_refault_anon 0 [ 3338.673575][T21077] workingset_refault_file 2 [ 3338.673575][T21077] workingset_activate_anon 0 [ 3338.673575][T21077] workingset_activate_file 0 [ 3338.673575][T21077] workingset_restore_anon 0 [ 3338.673575][T21077] workingset_restore_file 0 [ 3338.673575][T21077] workingset_nodereclaim 0 [ 3338.673575][T21077] pgscan 55876 [ 3338.673575][T21077] pgsteal 454 [ 3338.673575][T21077] pgscan_kswapd 0 [ 3338.673575][T21077] pgscan_direct 55876 [ 3338.673575][T21077] pgscan_khugepaged 0 [ 3338.673575][T21077] pgsteal_kswapd 0 [ 3338.673575][T21077] pgsteal_direct 454 [ 3338.673575][T21077] pgsteal_khugepaged 0 [ 3338.673575][T21077] pgfault 415930 [ 3338.673575][T21077] pgmajfault 1 [ 3338.673575][T21077] pgrefill 207168 [ 3338.673575][T21077] pgactivate 55413 [ 3338.673575][T21077] pgdeactivate 0 [ 3338.673575][T21077] pglazyfree 0 [ 3338.673575][T21077] pglazyfreed 0 [ 3338.673575][T21077] zswpin 0 [ 3338.673575][T21077] zswpout 0 [ 3338.866300][T21077] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21077,uid=0 [ 3338.882051][T21077] Memory cgroup out of memory: Killed process 21077 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3338.904094][T21086] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3338.929349][T21086] CPU: 0 PID: 21086 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3338.939864][T21086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3338.949978][T21086] Call Trace: [ 3338.953306][T21086] [ 3338.956291][T21086] dump_stack_lvl+0x136/0x150 [ 3338.961033][T21086] dump_header+0x10a/0xd70 [ 3338.965522][T21086] oom_kill_process+0x25d/0x600 [ 3338.970482][T21086] out_of_memory+0x35c/0x1660 [ 3338.975260][T21086] ? oom_killer_disable+0x2b0/0x2b0 [ 3338.980534][T21086] ? rcu_read_unlock+0x9/0x60 [ 3338.985279][T21086] ? find_held_lock+0x2d/0x110 [ 3338.990120][T21086] mem_cgroup_out_of_memory+0x206/0x270 [ 3338.995754][T21086] ? mem_cgroup_margin+0x130/0x130 [ 3339.000943][T21086] ? lock_downgrade+0x690/0x690 [ 3339.005884][T21086] try_charge_memcg+0xf9b/0x13b0 [ 3339.010900][T21086] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3339.016943][T21086] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3339.022745][T21086] ? lock_downgrade+0x690/0x690 [ 3339.027674][T21086] ? lock_downgrade+0x690/0x690 [ 3339.032603][T21086] obj_cgroup_charge+0x2af/0x5e0 [ 3339.037608][T21086] ? sock_alloc_inode+0x27/0x1d0 [ 3339.042613][T21086] kmem_cache_alloc_lru+0x142/0x600 [ 3339.047898][T21086] sock_alloc_inode+0x27/0x1d0 [ 3339.052722][T21086] ? sock_free_inode+0x30/0x30 [ 3339.057546][T21086] alloc_inode+0x61/0x230 [ 3339.062217][T21086] new_inode_pseudo+0x17/0x80 [ 3339.066999][T21086] sock_alloc+0x40/0x270 [ 3339.071317][T21086] __sock_create+0xbd/0x850 [ 3339.075909][T21086] __sys_socket+0x133/0x250 [ 3339.080487][T21086] ? __sys_socket_file+0x1d0/0x1d0 [ 3339.085677][T21086] ? kcov_ioctl+0x384/0x6f0 [ 3339.090256][T21086] __x64_sys_socket+0x73/0xb0 [ 3339.095113][T21086] do_syscall_64+0x39/0xb0 [ 3339.099606][T21086] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.105584][T21086] RIP: 0033:0x7f0e44a8c169 [ 3339.110072][T21086] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3339.129761][T21086] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3339.138327][T21086] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3339.146329][T21086] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3339.154321][T21086] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3339.162311][T21086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3339.170298][T21086] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 08:19:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffff0300) 08:19:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xce53030000000000) [ 3339.178326][T21086] 08:19:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000040), 0x0, 0x175667cb, 0x8) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3339.213183][T21086] memory: usage 307184kB, limit 307200kB, failcnt 73912 [ 3339.337097][T21086] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3339.344462][T21086] Memory cgroup stats for /syz5: [ 3339.344798][T21086] anon 94208 [ 3339.344798][T21086] file 352256 [ 3339.344798][T21086] kernel 314109952 [ 3339.344798][T21086] kernel_stack 65536 [ 3339.344798][T21086] pagetables 73728 [ 3339.344798][T21086] sec_pagetables 0 [ 3339.344798][T21086] percpu 5432688 [ 3339.344798][T21086] sock 0 [ 3339.344798][T21086] vmalloc 20480 [ 3339.344798][T21086] shmem 344064 [ 3339.344798][T21086] zswap 0 [ 3339.344798][T21086] zswapped 0 [ 3339.344798][T21086] file_mapped 327680 [ 3339.344798][T21086] file_dirty 8192 [ 3339.344798][T21086] file_writeback 0 [ 3339.344798][T21086] swapcached 0 [ 3339.344798][T21086] anon_thp 0 [ 3339.344798][T21086] file_thp 0 [ 3339.344798][T21086] shmem_thp 0 [ 3339.344798][T21086] inactive_anon 32768 [ 3339.344798][T21086] active_anon 405504 [ 3339.344798][T21086] inactive_file 8192 [ 3339.344798][T21086] active_file 0 [ 3339.344798][T21086] unevictable 0 [ 3339.344798][T21086] slab_reclaimable 12472 [ 3339.344798][T21086] slab_unreclaimable 308475704 [ 3339.344798][T21086] slab 308488176 [ 3339.344798][T21086] workingset_refault_anon 0 [ 3339.344798][T21086] workingset_refault_file 1 [ 3339.344798][T21086] workingset_activate_anon 0 [ 3339.344798][T21086] workingset_activate_file 0 [ 3339.344798][T21086] workingset_restore_anon 0 [ 3339.344798][T21086] workingset_restore_file 0 [ 3339.344798][T21086] workingset_nodereclaim 0 [ 3339.344798][T21086] pgscan 42926 [ 3339.344798][T21086] pgsteal 454 [ 3339.344798][T21086] pgscan_kswapd 0 [ 3339.344798][T21086] pgscan_direct 42926 08:19:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffa888) 08:19:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xcf53030000000000) [ 3339.344798][T21086] pgscan_khugepaged 0 [ 3339.344798][T21086] pgsteal_kswapd 0 [ 3339.344798][T21086] pgsteal_direct 454 [ 3339.344798][T21086] pgsteal_khugepaged 0 [ 3339.344798][T21086] pgfault 411914 [ 3339.344798][T21086] pgmajfault 0 [ 3339.344798][T21086] pgrefill 141347 [ 3339.344798][T21086] pgactivate 42457 [ 3339.344798][T21086] pgdeactivate 0 [ 3339.344798][T21086] pglazyfree 0 [ 3339.344798][T21086] pglazyfreed 0 [ 3339.344798][T21086] zswpin 0 [ 3339.344798][T21086] zswpout 0 08:19:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfffff000) [ 3339.645085][T21086] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21079,uid=0 [ 3339.669860][T21086] Memory cgroup out of memory: Killed process 21079 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3339.697832][T21090] syz-executor.1 invoked oom-killer: gfp_mask=0xdc0(GFP_KERNEL|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3339.725147][T21090] CPU: 1 PID: 21090 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3339.735667][T21090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3339.745778][T21090] Call Trace: [ 3339.749102][T21090] [ 3339.752088][T21090] dump_stack_lvl+0x136/0x150 [ 3339.756833][T21090] dump_header+0x10a/0xd70 [ 3339.761326][T21090] oom_kill_process+0x25d/0x600 [ 3339.766261][T21090] out_of_memory+0x35c/0x1660 [ 3339.771046][T21090] ? oom_killer_disable+0x2b0/0x2b0 [ 3339.776328][T21090] ? rcu_read_unlock+0x9/0x60 [ 3339.781091][T21090] ? find_held_lock+0x2d/0x110 [ 3339.785983][T21090] mem_cgroup_out_of_memory+0x206/0x270 [ 3339.791653][T21090] ? mem_cgroup_margin+0x130/0x130 [ 3339.796882][T21090] ? lock_downgrade+0x690/0x690 [ 3339.801822][T21090] try_charge_memcg+0xf9b/0x13b0 [ 3339.806834][T21090] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3339.812974][T21090] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3339.818789][T21090] ? lock_downgrade+0x690/0x690 [ 3339.823717][T21090] ? lock_downgrade+0x690/0x690 [ 3339.828641][T21090] ? rcu_read_unlock+0x9/0x60 [ 3339.833443][T21090] obj_cgroup_charge+0x2af/0x5e0 [ 3339.838461][T21090] ? __alloc_file+0x21/0x270 [ 3339.843125][T21090] kmem_cache_alloc+0xb1/0x3b0 [ 3339.847998][T21090] __alloc_file+0x21/0x270 [ 3339.852475][T21090] alloc_empty_file+0x71/0x190 [ 3339.857291][T21090] alloc_file+0x5e/0x800 [ 3339.861599][T21090] alloc_file_clone+0x26/0xc0 [ 3339.866315][T21090] create_pipe_files+0x498/0x8d0 [ 3339.871291][T21090] do_pipe2+0x96/0x1b0 [ 3339.875391][T21090] ? create_pipe_files+0x8d0/0x8d0 [ 3339.880578][T21090] ? syscall_enter_from_user_mode+0x26/0x80 [ 3339.886539][T21090] __x64_sys_pipe+0x33/0x40 [ 3339.891092][T21090] do_syscall_64+0x39/0xb0 [ 3339.895561][T21090] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3339.901499][T21090] RIP: 0033:0x7faa0ba8c169 [ 3339.905935][T21090] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3339.925587][T21090] RSP: 002b:00007faa0c8d1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 3339.934044][T21090] RAX: ffffffffffffffda RBX: 00007faa0bbabf80 RCX: 00007faa0ba8c169 [ 3339.942057][T21090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 3339.950152][T21090] RBP: 00007faa0bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3339.958181][T21090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3339.966206][T21090] R13: 00007ffd537ccaef R14: 00007faa0c8d1300 R15: 0000000000022000 [ 3339.974303][T21090] 08:19:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd74b0300) 08:19:06 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd003000000000000) [ 3339.995476][T21090] memory: usage 307192kB, limit 307200kB, failcnt 94313 [ 3340.006289][T21090] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3340.021920][T21090] Memory cgroup stats for /syz1: [ 3340.022240][T21090] anon 126976 [ 3340.022240][T21090] file 352256 [ 3340.022240][T21090] kernel 314081280 [ 3340.022240][T21090] kernel_stack 65536 [ 3340.022240][T21090] pagetables 73728 [ 3340.022240][T21090] sec_pagetables 0 [ 3340.022240][T21090] percpu 5423968 [ 3340.022240][T21090] sock 0 [ 3340.022240][T21090] vmalloc 16384 [ 3340.022240][T21090] shmem 339968 [ 3340.022240][T21090] zswap 0 [ 3340.022240][T21090] zswapped 0 [ 3340.022240][T21090] file_mapped 262144 [ 3340.022240][T21090] file_dirty 8192 [ 3340.022240][T21090] file_writeback 0 [ 3340.022240][T21090] swapcached 0 [ 3340.022240][T21090] anon_thp 0 [ 3340.022240][T21090] file_thp 0 [ 3340.022240][T21090] shmem_thp 0 [ 3340.022240][T21090] inactive_anon 65536 [ 3340.022240][T21090] active_anon 401408 [ 3340.022240][T21090] inactive_file 12288 [ 3340.022240][T21090] active_file 0 [ 3340.022240][T21090] unevictable 0 [ 3340.022240][T21090] slab_reclaimable 248984 [ 3340.022240][T21090] slab_unreclaimable 308224536 [ 3340.022240][T21090] slab 308473520 [ 3340.022240][T21090] workingset_refault_anon 0 [ 3340.022240][T21090] workingset_refault_file 4 [ 3340.022240][T21090] workingset_activate_anon 0 [ 3340.022240][T21090] workingset_activate_file 0 [ 3340.022240][T21090] workingset_restore_anon 0 [ 3340.022240][T21090] workingset_restore_file 2 [ 3340.022240][T21090] workingset_nodereclaim 0 [ 3340.022240][T21090] pgscan 78925 [ 3340.022240][T21090] pgsteal 599 [ 3340.022240][T21090] pgscan_kswapd 0 [ 3340.022240][T21090] pgscan_direct 78925 [ 3340.022240][T21090] pgscan_khugepaged 0 [ 3340.022240][T21090] pgsteal_kswapd 0 [ 3340.022240][T21090] pgsteal_direct 599 [ 3340.022240][T21090] pgsteal_khugepaged 0 [ 3340.022240][T21090] pgfault 409799 [ 3340.022240][T21090] pgmajfault 0 [ 3340.022240][T21090] pgrefill 213656 [ 3340.022240][T21090] pgactivate 78233 [ 3340.022240][T21090] pgdeactivate 0 [ 3340.022240][T21090] pglazyfree 0 [ 3340.022240][T21090] pglazyfreed 0 [ 3340.022240][T21090] zswpin 0 [ 3340.022240][T21090] zswpout 0 [ 3340.212741][T21090] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21085,uid=0 [ 3340.228608][T21090] Memory cgroup out of memory: Killed process 21085 (syz-executor.1) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3340.256647][T21094] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3340.282634][T21094] CPU: 0 PID: 21094 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3340.293159][T21094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3340.303233][T21094] Call Trace: [ 3340.306522][T21094] [ 3340.309486][T21094] dump_stack_lvl+0x136/0x150 [ 3340.314186][T21094] dump_header+0x10a/0xd70 [ 3340.318629][T21094] oom_kill_process+0x25d/0x600 [ 3340.323515][T21094] out_of_memory+0x35c/0x1660 [ 3340.328242][T21094] ? oom_killer_disable+0x2b0/0x2b0 [ 3340.333490][T21094] ? rcu_read_unlock+0x9/0x60 [ 3340.338206][T21094] ? find_held_lock+0x2d/0x110 [ 3340.343027][T21094] mem_cgroup_out_of_memory+0x206/0x270 [ 3340.348621][T21094] ? mem_cgroup_margin+0x130/0x130 [ 3340.353775][T21094] ? lock_downgrade+0x690/0x690 [ 3340.358680][T21094] try_charge_memcg+0xf9b/0x13b0 [ 3340.363656][T21094] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3340.369668][T21094] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3340.375433][T21094] ? lock_downgrade+0x690/0x690 [ 3340.380317][T21094] ? lock_downgrade+0x690/0x690 [ 3340.385214][T21094] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3340.390797][T21094] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3340.396997][T21094] copy_process+0x13a7/0x7590 [ 3340.401716][T21094] ? __lock_acquire+0xbc5/0x5d40 [ 3340.406701][T21094] ? __cleanup_sighand+0xb0/0xb0 [ 3340.411678][T21094] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3340.417697][T21094] ? psi_memstall_leave+0x174/0x250 [ 3340.422937][T21094] ? lock_downgrade+0x690/0x690 [ 3340.427827][T21094] kernel_clone+0xeb/0x890 [ 3340.432288][T21094] ? create_io_thread+0xf0/0xf0 [ 3340.437177][T21094] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3340.443461][T21094] ? lock_downgrade+0x690/0x690 [ 3340.448375][T21094] __do_sys_clone+0xba/0x100 [ 3340.453022][T21094] ? kernel_clone+0x890/0x890 [ 3340.457753][T21094] ? syscall_enter_from_user_mode+0x26/0x80 [ 3340.463692][T21094] do_syscall_64+0x39/0xb0 [ 3340.468158][T21094] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3340.474142][T21094] RIP: 0033:0x7f461ea8d591 [ 3340.478594][T21094] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3340.498321][T21094] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 08:19:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$rds(0x15, 0x5, 0x0) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r2, &(0x7f0000001780)={&(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x3}, &(0x7f00000015c0)=0x2, &(0x7f0000001600)=0x2000, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x10, 0x100000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x1000}, &(0x7f0000001640)=0x2e8, &(0x7f0000001680)=0x1ff, 0x8, 0xfffffffffffffffe, 0xfff, 0x6, 0x20, 0x3}}], 0xb0, 0x4000000}, 0x4800) (async) write$binfmt_elf32(r2, 0x0, 0x3) (async) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000280)="94f4fe47aca727b6d67b113a42473f5dfff33cfc1f2b5732c15bf27f4514fe558e0da842d2fdf92c1da5dc45e2eedf0a16ec58fee49ade5e8a2673c04a3f1b90a45e374240fed0c7080485d1a3c49bf714ff893fa9ee4a2aabd954027246e1", 0x5f, 0x44, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r4, 0x0, r5, 0x0, 0x4ff9c, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@multicast1}, {@initdev}, {@loopback}, {}]}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="0000e06b3484aeaa346f32f0e612808000018062726964676500000c00028008001d0000001aa91f3af0c30879fe10b732d3000037807df151a7c6bd87ab712a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000200000012bbd7000fedbdf250a8020690900000013000100080010003f00000014000100fc0100000000000000000000000000001400010000000000000000000000000000000000140001002001000000000000000000000006000114000200fe8000000000000000000000000000aa08000e000600000014000100fe8000000000000000000000000000bb"], 0x90}, 0x1, 0x0, 0x0, 0x22008004}, 0x8000) [ 3340.506768][T21094] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3340.514768][T21094] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3340.523461][T21094] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3340.531460][T21094] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3340.539461][T21094] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3340.547481][T21094] [ 3340.563815][T21094] memory: usage 307200kB, limit 307200kB, failcnt 81774 [ 3340.571001][T21094] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3340.585516][T21094] Memory cgroup stats for /syz3: [ 3340.585805][T21094] anon 86016 [ 3340.585805][T21094] file 364544 [ 3340.585805][T21094] kernel 314122240 [ 3340.585805][T21094] kernel_stack 32768 [ 3340.585805][T21094] pagetables 69632 [ 3340.585805][T21094] sec_pagetables 0 [ 3340.585805][T21094] percpu 5432320 [ 3340.585805][T21094] sock 0 [ 3340.585805][T21094] vmalloc 8192 [ 3340.585805][T21094] shmem 339968 [ 3340.585805][T21094] zswap 0 [ 3340.585805][T21094] zswapped 0 [ 3340.585805][T21094] file_mapped 327680 [ 3340.585805][T21094] file_dirty 20480 [ 3340.585805][T21094] file_writeback 0 [ 3340.585805][T21094] swapcached 0 [ 3340.585805][T21094] anon_thp 0 [ 3340.585805][T21094] file_thp 0 [ 3340.585805][T21094] shmem_thp 0 [ 3340.585805][T21094] inactive_anon 409600 [ 3340.585805][T21094] active_anon 16384 [ 3340.585805][T21094] inactive_file 0 [ 3340.585805][T21094] active_file 24576 [ 3340.585805][T21094] unevictable 0 [ 3340.585805][T21094] slab_reclaimable 37184 [ 3340.585805][T21094] slab_unreclaimable 308494152 [ 3340.585805][T21094] slab 308531336 [ 3340.585805][T21094] workingset_refault_anon 0 [ 3340.585805][T21094] workingset_refault_file 2 [ 3340.585805][T21094] workingset_activate_anon 0 [ 3340.585805][T21094] workingset_activate_file 0 [ 3340.585805][T21094] workingset_restore_anon 0 [ 3340.585805][T21094] workingset_restore_file 0 [ 3340.585805][T21094] workingset_nodereclaim 0 [ 3340.585805][T21094] pgscan 55963 [ 3340.585805][T21094] pgsteal 454 [ 3340.585805][T21094] pgscan_kswapd 0 [ 3340.585805][T21094] pgscan_direct 55963 [ 3340.585805][T21094] pgscan_khugepaged 0 [ 3340.585805][T21094] pgsteal_kswapd 0 [ 3340.585805][T21094] pgsteal_direct 454 [ 3340.585805][T21094] pgsteal_khugepaged 0 [ 3340.585805][T21094] pgfault 415972 [ 3340.585805][T21094] pgmajfault 1 [ 3340.585805][T21094] pgrefill 207951 [ 3340.585805][T21094] pgactivate 55500 [ 3340.585805][T21094] pgdeactivate 0 [ 3340.585805][T21094] pglazyfree 0 08:19:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffff7f) [ 3340.585805][T21094] pglazyfreed 0 [ 3340.585805][T21094] zswpin 0 [ 3340.585805][T21094] zswpout 0 [ 3340.774649][T21094] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21094,uid=0 [ 3340.792215][T21094] Memory cgroup out of memory: Killed process 21094 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3340.922583][T21107] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3340.984469][T21107] CPU: 0 PID: 21107 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3340.994982][T21107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3341.005102][T21107] Call Trace: [ 3341.008458][T21107] [ 3341.011437][T21107] dump_stack_lvl+0x136/0x150 [ 3341.016210][T21107] dump_header+0x10a/0xd70 [ 3341.020707][T21107] oom_kill_process+0x25d/0x600 [ 3341.025653][T21107] out_of_memory+0x35c/0x1660 [ 3341.030425][T21107] ? find_held_lock+0x2d/0x110 [ 3341.035470][T21107] ? oom_killer_disable+0x2b0/0x2b0 [ 3341.040758][T21107] ? rcu_read_unlock+0x9/0x60 [ 3341.045626][T21107] ? find_held_lock+0x2d/0x110 [ 3341.050487][T21107] mem_cgroup_out_of_memory+0x206/0x270 [ 3341.056128][T21107] ? mem_cgroup_margin+0x130/0x130 [ 3341.061354][T21107] ? lock_downgrade+0x690/0x690 [ 3341.066301][T21107] try_charge_memcg+0xf9b/0x13b0 [ 3341.071323][T21107] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3341.077374][T21107] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3341.083185][T21107] ? lock_downgrade+0x690/0x690 [ 3341.088116][T21107] ? lock_downgrade+0x690/0x690 [ 3341.093064][T21107] obj_cgroup_charge+0x2af/0x5e0 [ 3341.098087][T21107] ? sock_alloc_inode+0x27/0x1d0 [ 3341.103110][T21107] kmem_cache_alloc_lru+0x142/0x600 [ 3341.108412][T21107] sock_alloc_inode+0x27/0x1d0 [ 3341.113254][T21107] ? sock_free_inode+0x30/0x30 [ 3341.118096][T21107] alloc_inode+0x61/0x230 [ 3341.122510][T21107] new_inode_pseudo+0x17/0x80 [ 3341.127274][T21107] sock_alloc+0x40/0x270 08:19:07 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd053030000000000) [ 3341.131597][T21107] __sock_create+0xbd/0x850 [ 3341.136191][T21107] __sys_socket+0x133/0x250 [ 3341.140774][T21107] ? __sys_socket_file+0x1d0/0x1d0 [ 3341.145971][T21107] ? kcov_ioctl+0x384/0x6f0 [ 3341.150552][T21107] __x64_sys_socket+0x73/0xb0 [ 3341.155318][T21107] do_syscall_64+0x39/0xb0 [ 3341.159876][T21107] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3341.165855][T21107] RIP: 0033:0x7f0e44a8c169 [ 3341.170347][T21107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3341.190025][T21107] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3341.198561][T21107] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3341.206597][T21107] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3341.214655][T21107] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3341.222682][T21107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3341.230713][T21107] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3341.238753][T21107] [ 3341.249846][T21107] memory: usage 307200kB, limit 307200kB, failcnt 74044 [ 3341.257305][T21107] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3341.264435][T21107] Memory cgroup stats for /syz5: [ 3341.264675][T21107] anon 90112 [ 3341.264675][T21107] file 356352 [ 3341.264675][T21107] kernel 314126336 [ 3341.264675][T21107] kernel_stack 65536 [ 3341.264675][T21107] pagetables 73728 [ 3341.264675][T21107] sec_pagetables 0 [ 3341.264675][T21107] percpu 5432752 [ 3341.264675][T21107] sock 0 [ 3341.264675][T21107] vmalloc 20480 [ 3341.264675][T21107] shmem 344064 [ 3341.264675][T21107] zswap 0 [ 3341.264675][T21107] zswapped 0 [ 3341.264675][T21107] file_mapped 327680 [ 3341.264675][T21107] file_dirty 8192 [ 3341.264675][T21107] file_writeback 0 [ 3341.264675][T21107] swapcached 0 [ 3341.264675][T21107] anon_thp 0 [ 3341.264675][T21107] file_thp 0 [ 3341.264675][T21107] shmem_thp 0 [ 3341.264675][T21107] inactive_anon 24576 [ 3341.264675][T21107] active_anon 409600 [ 3341.264675][T21107] inactive_file 8192 [ 3341.264675][T21107] active_file 4096 [ 3341.264675][T21107] unevictable 0 [ 3341.264675][T21107] slab_reclaimable 12712 [ 3341.264675][T21107] slab_unreclaimable 308487616 [ 3341.264675][T21107] slab 308500328 [ 3341.264675][T21107] workingset_refault_anon 0 [ 3341.264675][T21107] workingset_refault_file 1 [ 3341.264675][T21107] workingset_activate_anon 0 [ 3341.264675][T21107] workingset_activate_file 0 [ 3341.264675][T21107] workingset_restore_anon 0 [ 3341.264675][T21107] workingset_restore_file 0 [ 3341.264675][T21107] workingset_nodereclaim 0 [ 3341.264675][T21107] pgscan 42973 [ 3341.264675][T21107] pgsteal 454 [ 3341.264675][T21107] pgscan_kswapd 0 [ 3341.264675][T21107] pgscan_direct 42973 [ 3341.264675][T21107] pgscan_khugepaged 0 [ 3341.264675][T21107] pgsteal_kswapd 0 [ 3341.264675][T21107] pgsteal_direct 454 [ 3341.264675][T21107] pgsteal_khugepaged 0 [ 3341.264675][T21107] pgfault 411957 [ 3341.264675][T21107] pgmajfault 0 [ 3341.264675][T21107] pgrefill 141545 [ 3341.264675][T21107] pgactivate 42504 08:19:07 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x44510300) 08:19:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4a009105}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x34, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff3, 0xfff2}, {0x10, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_delroute={0x160, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x6, 0xfd, 0x0, 0xfd, 0x5, 0x1800}, [@RTA_UID={0x8, 0x19, 0xee01}, @RTA_METRICS={0xda, 0x8, 0x0, 0x1, "3501e4ef3b17c2b790f1251a25a377f6a8c1e5d3e55d9788afc90d0fe1fb52a62467e6ebfb871a92cc85803a7246b3579d1fa8255d05a25ace44c1f410a9195d71bd71a0014016c138a4df16e265c4accdacf806d8398e14962d458219f35aa0bfbcd9c9c12fd9a01235fd8196629f0fe588e54f9c91444057246e2f2441927ce7b00151483e07cb3e1007a7e50bb8c0e280ae2705a37957749ff2fd32b68e6ecb343cd7e68a9091ff8f935b6c2d3748d9b4d9b6c4bf7916837dc9d166a5083c3a034da3f1303d24ffccf24650b80a2f78a585c72ba9"}, @RTA_MARK={0x8, 0x10, 0x800}, @RTA_METRICS={0x50, 0x8, 0x0, 0x1, "746b335cb9afe252c4920e3ee4444023cc7ae4acb11018f55e9e008f9e81ba06d293843a9c1df2ef929002d2252776b262a71b7d4fe3997e7e66fba551495ca4bc06a136b47f74c7a46f97fd"}, @RTA_TABLE={0x8}]}, 0x160}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, 0x0, 0x3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000800)={'syz0', "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"}, 0x1004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r3, 0x2f, 0x3f, 0x52, 0x0, 0x20, @empty, @remote, 0x1, 0x10, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x0, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x90, 0x0, 0xe, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x5fd7, 0xd9, &(0x7f0000000500)=""/217, 0x40f00, 0x1, '\x00', r4, 0x1f, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x7ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1]}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002d0008002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="080f0007400300f3ff06f8ff040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20040040) [ 3341.264675][T21107] pgdeactivate 0 [ 3341.264675][T21107] pglazyfree 0 [ 3341.264675][T21107] pglazyfreed 0 [ 3341.264675][T21107] zswpin 0 [ 3341.264675][T21107] zswpout 0 [ 3341.502266][T21107] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21104,uid=0 [ 3341.519291][T21107] Memory cgroup out of memory: Killed process 21104 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:19:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd84b0300) [ 3341.584096][T21106] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3341.597535][T21106] CPU: 0 PID: 21106 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3341.608039][T21106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3341.618151][T21106] Call Trace: [ 3341.621485][T21106] [ 3341.624503][T21106] dump_stack_lvl+0x136/0x150 [ 3341.629256][T21106] dump_header+0x10a/0xd70 [ 3341.633755][T21106] oom_kill_process+0x25d/0x600 [ 3341.638682][T21106] out_of_memory+0x35c/0x1660 [ 3341.643438][T21106] ? oom_killer_disable+0x2b0/0x2b0 [ 3341.648739][T21106] ? rcu_read_unlock+0x9/0x60 [ 3341.653499][T21106] ? find_held_lock+0x2d/0x110 [ 3341.658344][T21106] mem_cgroup_out_of_memory+0x206/0x270 [ 3341.663965][T21106] ? mem_cgroup_margin+0x130/0x130 [ 3341.669162][T21106] ? lock_downgrade+0x690/0x690 [ 3341.674114][T21106] try_charge_memcg+0xf9b/0x13b0 [ 3341.679108][T21106] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3341.685147][T21106] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3341.690950][T21106] ? lock_downgrade+0x690/0x690 [ 3341.695860][T21106] ? lock_downgrade+0x690/0x690 [ 3341.700786][T21106] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3341.706396][T21106] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3341.712621][T21106] copy_process+0x13a7/0x7590 [ 3341.717344][T21106] ? __lock_acquire+0xbc5/0x5d40 [ 3341.722437][T21106] ? __cleanup_sighand+0xb0/0xb0 [ 3341.727411][T21106] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3341.733438][T21106] ? psi_memstall_leave+0x174/0x250 [ 3341.738701][T21106] ? lock_downgrade+0x690/0x690 [ 3341.743679][T21106] kernel_clone+0xeb/0x890 [ 3341.748157][T21106] ? create_io_thread+0xf0/0xf0 [ 3341.753069][T21106] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3341.759382][T21106] ? lock_downgrade+0x690/0x690 [ 3341.764283][T21106] __do_sys_clone+0xba/0x100 [ 3341.768907][T21106] ? kernel_clone+0x890/0x890 [ 3341.773726][T21106] ? syscall_enter_from_user_mode+0x26/0x80 [ 3341.779702][T21106] do_syscall_64+0x39/0xb0 [ 3341.784172][T21106] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3341.790109][T21106] RIP: 0033:0x7faa0ba8d591 [ 3341.794584][T21106] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3341.814241][T21106] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3341.822686][T21106] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3341.830684][T21106] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3341.838679][T21106] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3341.846694][T21106] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3341.854702][T21106] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3341.862721][T21106] [ 3341.880014][T21106] memory: usage 307200kB, limit 307200kB, failcnt 94448 [ 3341.890080][T21106] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3341.898929][T21106] Memory cgroup stats for /syz1: [ 3341.899203][T21106] anon 94208 [ 3341.899203][T21106] file 356352 [ 3341.899203][T21106] kernel 314122240 [ 3341.899203][T21106] kernel_stack 65536 [ 3341.899203][T21106] pagetables 73728 [ 3341.899203][T21106] sec_pagetables 0 [ 3341.899203][T21106] percpu 5424032 [ 3341.899203][T21106] sock 0 [ 3341.899203][T21106] vmalloc 16384 [ 3341.899203][T21106] shmem 339968 [ 3341.899203][T21106] zswap 0 [ 3341.899203][T21106] zswapped 0 [ 3341.899203][T21106] file_mapped 262144 [ 3341.899203][T21106] file_dirty 8192 [ 3341.899203][T21106] file_writeback 0 [ 3341.899203][T21106] swapcached 0 [ 3341.899203][T21106] anon_thp 0 [ 3341.899203][T21106] file_thp 0 [ 3341.899203][T21106] shmem_thp 0 [ 3341.899203][T21106] inactive_anon 49152 [ 3341.899203][T21106] active_anon 385024 [ 3341.899203][T21106] inactive_file 0 [ 3341.899203][T21106] active_file 16384 [ 3341.899203][T21106] unevictable 0 [ 3341.899203][T21106] slab_reclaimable 245608 [ 3341.899203][T21106] slab_unreclaimable 308238128 [ 3341.899203][T21106] slab 308483736 [ 3341.899203][T21106] workingset_refault_anon 0 [ 3341.899203][T21106] workingset_refault_file 4 [ 3341.899203][T21106] workingset_activate_anon 0 [ 3341.899203][T21106] workingset_activate_file 0 [ 3341.899203][T21106] workingset_restore_anon 0 [ 3341.899203][T21106] workingset_restore_file 2 [ 3341.899203][T21106] workingset_nodereclaim 0 [ 3341.899203][T21106] pgscan 79063 [ 3341.899203][T21106] pgsteal 599 [ 3341.899203][T21106] pgscan_kswapd 0 [ 3341.899203][T21106] pgscan_direct 79063 [ 3341.899203][T21106] pgscan_khugepaged 0 [ 3341.899203][T21106] pgsteal_kswapd 0 [ 3341.899203][T21106] pgsteal_direct 599 [ 3341.899203][T21106] pgsteal_khugepaged 0 [ 3341.899203][T21106] pgfault 409842 [ 3341.899203][T21106] pgmajfault 0 [ 3341.899203][T21106] pgrefill 213956 [ 3341.899203][T21106] pgactivate 78371 [ 3341.899203][T21106] pgdeactivate 0 [ 3341.899203][T21106] pglazyfree 0 [ 3341.899203][T21106] pglazyfreed 0 [ 3341.899203][T21106] zswpin 0 [ 3341.899203][T21106] zswpout 0 [ 3342.101044][T21106] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21106,uid=0 [ 3342.117567][T21106] Memory cgroup out of memory: Killed process 21106 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffff9e) [ 3342.142978][T21113] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3342.161373][T21113] CPU: 0 PID: 21113 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3342.171874][T21113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3342.181984][T21113] Call Trace: [ 3342.185313][T21113] [ 3342.188298][T21113] dump_stack_lvl+0x136/0x150 [ 3342.193044][T21113] dump_header+0x10a/0xd70 [ 3342.197541][T21113] oom_kill_process+0x25d/0x600 [ 3342.202472][T21113] out_of_memory+0x35c/0x1660 [ 3342.207237][T21113] ? oom_killer_disable+0x2b0/0x2b0 [ 3342.212511][T21113] ? rcu_read_unlock+0x9/0x60 [ 3342.217260][T21113] ? find_held_lock+0x2d/0x110 [ 3342.222121][T21113] mem_cgroup_out_of_memory+0x206/0x270 [ 3342.228271][T21113] ? mem_cgroup_margin+0x130/0x130 [ 3342.233469][T21113] ? lock_downgrade+0x690/0x690 [ 3342.238415][T21113] try_charge_memcg+0xf9b/0x13b0 [ 3342.243431][T21113] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3342.250090][T21113] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3342.255900][T21113] ? lock_downgrade+0x690/0x690 [ 3342.260820][T21113] ? lock_downgrade+0x690/0x690 [ 3342.265733][T21113] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3342.271342][T21113] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3342.277538][T21113] copy_process+0x13a7/0x7590 [ 3342.282258][T21113] ? __lock_acquire+0xbc5/0x5d40 [ 3342.287243][T21113] ? __cleanup_sighand+0xb0/0xb0 [ 3342.292392][T21113] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3342.298413][T21113] ? psi_memstall_leave+0x174/0x250 [ 3342.303661][T21113] ? lock_downgrade+0x690/0x690 [ 3342.308558][T21113] kernel_clone+0xeb/0x890 [ 3342.313018][T21113] ? create_io_thread+0xf0/0xf0 [ 3342.317912][T21113] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3342.324201][T21113] ? lock_downgrade+0x690/0x690 [ 3342.329099][T21113] __do_sys_clone+0xba/0x100 [ 3342.333727][T21113] ? kernel_clone+0x890/0x890 [ 3342.338455][T21113] ? syscall_enter_from_user_mode+0x26/0x80 [ 3342.344398][T21113] do_syscall_64+0x39/0xb0 [ 3342.348866][T21113] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3342.354805][T21113] RIP: 0033:0x7f461ea8d591 [ 3342.359262][T21113] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3342.378910][T21113] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3342.387358][T21113] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 08:19:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r2, &(0x7f0000001780)={&(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x3}, &(0x7f00000015c0)=0x2, &(0x7f0000001600)=0x2000, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x10, 0x100000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x1000}, &(0x7f0000001640)=0x2e8, &(0x7f0000001680)=0x1ff, 0x8, 0xfffffffffffffffe, 0xfff, 0x6, 0x20, 0x3}}], 0xb0, 0x4000000}, 0x4800) write$binfmt_elf32(r2, 0x0, 0x3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000280)="94f4fe47aca727b6d67b113a42473f5dfff33cfc1f2b5732c15bf27f4514fe558e0da842d2fdf92c1da5dc45e2eedf0a16ec58fee49ade5e8a2673c04a3f1b90a45e374240fed0c7080485d1a3c49bf714ff893fa9ee4a2aabd954027246e1", 0x5f, 0x44, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000240)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r4, 0x0, r5, 0x0, 0x4ff9c, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@multicast1}, {@initdev}, {@loopback}, {}]}}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="0000e06b3484aeaa346f32f0e612808000018062726964676500000c00028008001d0000001aa91f3af0c30879fe10b732d3000037807df151a7c6bd87ab712a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000200000012bbd7000fedbdf250a8020690900000013000100080010003f00000014000100fc0100000000000000000000000000001400010000000000000000000000000000000000140001002001000000000000000000000006000114000200fe8000000000000000000000000000aa08000e000600000014000100fe8000000000000000000000000000bb"], 0x90}, 0x1, 0x0, 0x0, 0x22008004}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) pipe(&(0x7f0000000000)) (async) sendmsg$rds(r2, &(0x7f0000001780)={&(0x7f0000000440)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000480)=""/211, 0xd3}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x2, &(0x7f00000016c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x3}, &(0x7f00000015c0)=0x2, &(0x7f0000001600)=0x2000, 0x0, 0x0, 0x2, 0xfffffffffffffff9, 0x10, 0x100000001}}, @mask_fadd={0x58, 0x114, 0x8, {{0x3, 0x1000}, &(0x7f0000001640)=0x2e8, &(0x7f0000001680)=0x1ff, 0x8, 0xfffffffffffffffe, 0xfff, 0x6, 0x20, 0x3}}], 0xb0, 0x4000000}, 0x4800) (async) write$binfmt_elf32(r2, 0x0, 0x3) (async) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) sendto$inet(r3, &(0x7f0000000280)="94f4fe47aca727b6d67b113a42473f5dfff33cfc1f2b5732c15bf27f4514fe558e0da842d2fdf92c1da5dc45e2eedf0a16ec58fee49ade5e8a2673c04a3f1b90a45e374240fed0c7080485d1a3c49bf714ff893fa9ee4a2aabd954027246e1", 0x5f, 0x44, &(0x7f0000000340)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) ioctl$F2FS_IOC_GET_PIN_FILE(r1, 0x8004f50e, &(0x7f0000000240)) (async) pipe(&(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r4, 0x0, r5, 0x0, 0x4ff9c, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000400)={'sit0\x00', &(0x7f0000000380)={@broadcast, 0x0, 0x0, 0x50, 0x0, [{@loopback}, {@multicast1}, {@initdev}, {@loopback}, {}]}}) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000070400"/20, @ANYRES32=0x0, @ANYBLOB="0000e06b3484aeaa346f32f0e612808000018062726964676500000c00028008001d0000001aa91f3af0c30879fe10b732d3000037807df151a7c6bd87ab712a"], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000200000012bbd7000fedbdf250a8020690900000013000100080010003f00000014000100fc0100000000000000000000000000001400010000000000000000000000000000000000140001002001000000000000000000000006000114000200fe8000000000000000000000000000aa08000e000600000014000100fe8000000000000000000000000000bb"], 0x90}, 0x1, 0x0, 0x0, 0x22008004}, 0x8000) (async) 08:19:08 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd153030000000000) [ 3342.395361][T21113] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3342.403358][T21113] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3342.411388][T21113] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3342.419390][T21113] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3342.427411][T21113] 08:19:08 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffffa1) [ 3342.527674][T21113] memory: usage 307200kB, limit 307200kB, failcnt 81922 [ 3342.534849][T21113] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3342.544313][T21113] Memory cgroup stats for /syz3: [ 3342.544594][T21113] anon 86016 [ 3342.544594][T21113] file 368640 [ 3342.544594][T21113] kernel 314118144 [ 3342.544594][T21113] kernel_stack 32768 [ 3342.544594][T21113] pagetables 69632 [ 3342.544594][T21113] sec_pagetables 0 [ 3342.544594][T21113] percpu 5432320 [ 3342.544594][T21113] sock 0 [ 3342.544594][T21113] vmalloc 8192 [ 3342.544594][T21113] shmem 339968 [ 3342.544594][T21113] zswap 0 [ 3342.544594][T21113] zswapped 0 [ 3342.544594][T21113] file_mapped 327680 [ 3342.544594][T21113] file_dirty 24576 [ 3342.544594][T21113] file_writeback 0 [ 3342.544594][T21113] swapcached 0 [ 3342.544594][T21113] anon_thp 0 [ 3342.544594][T21113] file_thp 0 [ 3342.544594][T21113] shmem_thp 0 [ 3342.544594][T21113] inactive_anon 397312 [ 3342.544594][T21113] active_anon 28672 [ 3342.544594][T21113] inactive_file 0 [ 3342.544594][T21113] active_file 28672 [ 3342.544594][T21113] unevictable 0 [ 3342.544594][T21113] slab_reclaimable 37424 [ 3342.544594][T21113] slab_unreclaimable 308494152 [ 3342.544594][T21113] slab 308531576 [ 3342.544594][T21113] workingset_refault_anon 0 [ 3342.544594][T21113] workingset_refault_file 2 [ 3342.544594][T21113] workingset_activate_anon 0 [ 3342.544594][T21113] workingset_activate_file 0 [ 3342.544594][T21113] workingset_restore_anon 0 [ 3342.544594][T21113] workingset_restore_file 0 [ 3342.544594][T21113] workingset_nodereclaim 0 [ 3342.544594][T21113] pgscan 56128 [ 3342.544594][T21113] pgsteal 454 [ 3342.544594][T21113] pgscan_kswapd 0 [ 3342.544594][T21113] pgscan_direct 56128 [ 3342.544594][T21113] pgscan_khugepaged 0 [ 3342.544594][T21113] pgsteal_kswapd 0 [ 3342.544594][T21113] pgsteal_direct 454 [ 3342.544594][T21113] pgsteal_khugepaged 0 [ 3342.544594][T21113] pgfault 416012 [ 3342.544594][T21113] pgmajfault 1 [ 3342.544594][T21113] pgrefill 208958 [ 3342.544594][T21113] pgactivate 55665 [ 3342.544594][T21113] pgdeactivate 0 [ 3342.544594][T21113] pglazyfree 0 [ 3342.544594][T21113] pglazyfreed 0 [ 3342.544594][T21113] zswpin 0 [ 3342.544594][T21113] zswpout 0 [ 3342.735484][T21113] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21113,uid=0 [ 3342.753670][T21113] Memory cgroup out of memory: Killed process 21113 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3342.774321][T21114] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3342.809900][T21114] CPU: 0 PID: 21114 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3342.820404][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3342.830527][T21114] Call Trace: [ 3342.833860][T21114] [ 3342.836865][T21114] dump_stack_lvl+0x136/0x150 [ 3342.841634][T21114] dump_header+0x10a/0xd70 [ 3342.846120][T21114] oom_kill_process+0x25d/0x600 [ 3342.851044][T21114] out_of_memory+0x35c/0x1660 [ 3342.855793][T21114] ? oom_killer_disable+0x2b0/0x2b0 [ 3342.861058][T21114] ? rcu_read_unlock+0x9/0x60 [ 3342.865804][T21114] ? find_held_lock+0x2d/0x110 [ 3342.870650][T21114] mem_cgroup_out_of_memory+0x206/0x270 [ 3342.876251][T21114] ? mem_cgroup_margin+0x130/0x130 [ 3342.881402][T21114] ? lock_downgrade+0x690/0x690 [ 3342.886341][T21114] try_charge_memcg+0xf9b/0x13b0 [ 3342.891325][T21114] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3342.897359][T21114] ? rcu_read_unlock+0x9/0x60 [ 3342.902075][T21114] ? lock_downgrade+0x690/0x690 [ 3342.906976][T21114] charge_memcg+0x90/0x3b0 [ 3342.911425][T21114] __mem_cgroup_charge+0x2b/0x90 [ 3342.916394][T21114] do_wp_page+0x8eb/0x3520 [ 3342.920857][T21114] ? lock_release+0x670/0x670 [ 3342.925571][T21114] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3342.930982][T21114] ? do_raw_spin_lock+0x124/0x2b0 [ 3342.936047][T21114] ? spin_bug+0x1c0/0x1c0 [ 3342.940409][T21114] ? lock_downgrade+0x690/0x690 [ 3342.945310][T21114] __handle_mm_fault+0x19a1/0x3e60 [ 3342.950476][T21114] ? vm_iomap_memory+0x190/0x190 [ 3342.955487][T21114] handle_mm_fault+0x2ba/0x9c0 [ 3342.960302][T21114] do_user_addr_fault+0x475/0x1230 [ 3342.965484][T21114] ? rcu_is_watching+0x12/0xb0 [ 3342.970306][T21114] exc_page_fault+0x98/0x170 [ 3342.974947][T21114] asm_exc_page_fault+0x26/0x30 [ 3342.979837][T21114] RIP: 0033:0x7f9ac6239610 [ 3342.984277][T21114] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3343.003927][T21114] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3343.010041][T21114] RAX: 00000000388b9d9b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3343.018039][T21114] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c2369 [ 3343.026037][T21114] RBP: 00000000388b9d9b R08: 0000000000001d9b R09: 00000000388b9d9f [ 3343.034030][T21114] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3343.042036][T21114] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff87f9a562 [ 3343.050030][T21114] ? __sock_create+0x62/0x850 [ 3343.054850][T21114] [ 3343.066150][T21114] memory: usage 307200kB, limit 307200kB, failcnt 71149 08:19:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffffc3) [ 3343.080577][T21114] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3343.108162][T21114] Memory cgroup stats for /syz2: [ 3343.108433][T21114] anon 110592 [ 3343.108433][T21114] file 368640 [ 3343.108433][T21114] kernel 314093568 [ 3343.108433][T21114] kernel_stack 65536 [ 3343.108433][T21114] pagetables 69632 [ 3343.108433][T21114] sec_pagetables 0 [ 3343.108433][T21114] percpu 5428704 [ 3343.108433][T21114] sock 0 [ 3343.108433][T21114] vmalloc 0 [ 3343.108433][T21114] shmem 348160 [ 3343.108433][T21114] zswap 0 [ 3343.108433][T21114] zswapped 0 [ 3343.108433][T21114] file_mapped 311296 [ 3343.108433][T21114] file_dirty 16384 [ 3343.108433][T21114] file_writeback 0 [ 3343.108433][T21114] swapcached 0 [ 3343.108433][T21114] anon_thp 0 [ 3343.108433][T21114] file_thp 0 [ 3343.108433][T21114] shmem_thp 0 [ 3343.108433][T21114] inactive_anon 40960 [ 3343.108433][T21114] active_anon 417792 [ 3343.108433][T21114] inactive_file 0 [ 3343.108433][T21114] active_file 20480 [ 3343.108433][T21114] unevictable 0 [ 3343.108433][T21114] slab_reclaimable 218392 [ 3343.108433][T21114] slab_unreclaimable 308286168 [ 3343.108433][T21114] slab 308504560 [ 3343.108433][T21114] workingset_refault_anon 0 [ 3343.108433][T21114] workingset_refault_file 0 [ 3343.108433][T21114] workingset_activate_anon 0 [ 3343.108433][T21114] workingset_activate_file 0 [ 3343.108433][T21114] workingset_restore_anon 0 08:19:09 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4a009105}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x34, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff3, 0xfff2}, {0x10, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_delroute={0x160, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x6, 0xfd, 0x0, 0xfd, 0x5, 0x1800}, [@RTA_UID={0x8, 0x19, 0xee01}, @RTA_METRICS={0xda, 0x8, 0x0, 0x1, "3501e4ef3b17c2b790f1251a25a377f6a8c1e5d3e55d9788afc90d0fe1fb52a62467e6ebfb871a92cc85803a7246b3579d1fa8255d05a25ace44c1f410a9195d71bd71a0014016c138a4df16e265c4accdacf806d8398e14962d458219f35aa0bfbcd9c9c12fd9a01235fd8196629f0fe588e54f9c91444057246e2f2441927ce7b00151483e07cb3e1007a7e50bb8c0e280ae2705a37957749ff2fd32b68e6ecb343cd7e68a9091ff8f935b6c2d3748d9b4d9b6c4bf7916837dc9d166a5083c3a034da3f1303d24ffccf24650b80a2f78a585c72ba9"}, @RTA_MARK={0x8, 0x10, 0x800}, @RTA_METRICS={0x50, 0x8, 0x0, 0x1, "746b335cb9afe252c4920e3ee4444023cc7ae4acb11018f55e9e008f9e81ba06d293843a9c1df2ef929002d2252776b262a71b7d4fe3997e7e66fba551495ca4bc06a136b47f74c7a46f97fd"}, @RTA_TABLE={0x8}]}, 0x160}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, 0x0, 0x3) (async) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000800)={'syz0', "e391db57c72202b9bff88496e1f3e7634132d245fcbdbfc5c52e36c78d8204893d066703e9e9af6108201bcd085585f3f14c440f49b3f6c9eff60015c955d1231df719e541234b9909d06d5dae51a3dc625792c4d897e6164148e630f720636dd90ab2dbc396b73477afa3d64b13d762565d2228d611ac9fc32abfe4b8fef23e8ef0742061be90710ad54928a3b710c59a73918b4937a73211450f3fbbd26b86fe8d7fda72a4c122f2932ff91fcdcf4760c2d722498cf872b395d270f31c2c6a1195a47d02f83696b2c0f4e8ff99751705913750db478e950a31798512d016e6c85f6820f79a67775f2f6bf3fb43783d0bfa936df271d42b167faf784cb187176d47b579b8cb2ddb50222523b9c4b355324b9792505ee1917c2e99d449eea5364c4bdfdfd173a52e8b50024fe0ba3054b0f4cca5004c2322731c23a7f8b272f8f6610e68905d3115bc208b346af0bf4d7bf7f56b8255d907e29d64be54e054b1b0db610934e552e5d36350a009d7fb64d0c56806daadd0023ace57947c4c6cc0a83432250169c00605b42a3bb01499340b6b1a3c5d60e92ec3b769697cd1037b277313d45055bcd7dadbcc2ecb14dc1dd11e81771abfbeeb7b4170921ce7c4e54e76878a8274e4f0d5de9eee106e170ea14db322e9a7872732295394036795e81af259b4f03bc54f6aadce5a00063da1937eaa952fb7e6df29096b9f44c33d3f70dcf9c3c1a91dc9c7d2f257dd135384beb818647009a47ad94317c8c829abc0d0d6d70b7a6d36329c264e3c75453a5e507364949443f7465d345c848fff8b58fd4b4985e13065ec035063620a09e620fcfa6064e77e9ee67d8905f91f84d6a3de564ebd8e840e9800663345b23b4496e383205dc7f4ab1814092add220d61396b38c851f08a0fd823569c5fe901405d0ced437bd8f732b0fc05caf4908138b62c25505c5fa8f9f3fe311417ba1fae65d2ba38ec6c376bfd1fc00bc34e2f81b62883fa450dd2f3359a1f18bca6f44a1a42709f5d9b2f14a71b94c356ed03ada5fe156e14e1791991fd7c52f64b142d2f5bab7da3ec986dd7957aed892c6b8d3b2e12581c39f0d9d87359028a6d130b9e0247ff4350ba1bd05e9943e6730a7d641a62351a5ca69f563bce2c17613e41b0510726b2520803406315ab600c8b2b03bdb9935c2ffbbb5676c82757c8083c965290b83cf6b65b7b6bb3c9b01391205368b2731930155aee09a2acbebed2d909ee76e99e1b6f158ac79a3a7d34577290e1c362f2d16d22376917590b985262112d37ddc99d14ac82f446fd94115cf936be1b55d4d8090defd0883934e54fceb3ae2190d2b139b0dc9063ef68f80fd15e4034c36cd1bf1d3f606f61159a4a93517c908ad4f2ded52d04f1b3940912b4f34e7496a0c75c35195c46cf736b8638b8101852cb75caa7dc4966e6cec84e8f55a26f80cef8a86f48b361a8b99d09895e5ab08973dcf8dc541ae4eb1f7231f85a1589d281b735aaf1affc8754548a181eb2cd851ec2e4ced2808e62307ef7265ba2abbc17ed18586eed326fab674a2cbf81674fc21315dbe560e1686b1a0648ad734c547ae5137f224e5e0aa6c36716df0c8017e422d58f3332216a75e86992aae0c581630c51a2b1b116d6b0c26fb6c3044657f736c8b37f6bc59ce80b23ab5f5d77bdbff90200b0d258a8079df87cf6301f803d5377f08a78d58258b9bcf2ad0afcde1e57c0d2b143c3a9a2a43ca5b4e161918a607cd731498b4d8322fb83ff8945e17b5e02b6f883a0519c964970c0e092f06e98fa0c321f263a5ff5a33d64de6174b2746fbda60e5d7ea0ed76b3610fdb5bec0564a68e08be25f7e81fbfb1e155f69745cf2e767433a09213bc4b3acab5e76eb1ccddc585735374570130163420e16797db76cc4fd285ad44ac2782071f4ea8b05bf0eee8dbbc9c17f4855bd1da8489b3edee4f3e626bd57f26a54af4738fa43401e4ddbb91447db041cc3041429b748bc22bca015f38ccb42a19e4b20778d46c0f9106c75c76e33bee73737c97a287f2f21f2948921c64f148bafdf016b3b375547e6b639c09bc98be4ce4a9a438b153ad66fa2c2594402b93c6e123f49bfa8e6d4b994c7e41defa16cd8678445463f883b34049a297e5d6850db036670e7e8f0b84ab3e813462f9907f2fdc3667c878a5e9ddba595b20afc457eb866f3426eb244c4e09fec676afbed5f495d2482dac23a407fe69d3c0417c713c426c29e8751afd326827c7a9a5c8b09aaf6055aecae6e6390b55e7befb90b9412e87ec57313fb8bf3335a04dfcd401caf287ed47511fa3a350919459a5a152e00b5b4e61818f4209332a82dd077780bad3c7f547dadff294da43e69808c9607efdc7605e585995ac596390b7c4db86bc8f6e1f65ecc57d7f383708de2d67adf4dbcc5ab59cced77f0ab0fd376b39f52e4a449198c7f477ccca6d42cd23ae9d5865c0885b86e2e1981b979b7da9be3da6a6a557a84b301efcaf232e034db0d9d1ccd03b8a2cab021f05e58ba20981e46b27f42608818fbb5704e788d25a7686b04e5d74ba40693061b23cb215dca27261e8658d8be7bed68f12b3a06ab35573b755275da8aa8354ed924bedf6bcc57bfa8123e788eb2c1381d3b9c45df21589912d9fcfeea8d719056046b5dd6139f498a3a33960c7efe5c61db1d68ec4b03610a54e74f3acf8aeab6275887c796553343501f29431af06b63cd3bd969a53b24a6fbb35a613b7a477082db73d9939df959fdf2ef839ce26e47edf11d563eb5e8edbde17cfc1ddb3665af4d420d2b3c27ecf60550ea28b1d15e276867c5d1083eaa1d9e9c59aacd2325e0febf30eefdfdf9b0034141db2ade3f854634fa8c3a3efae1e79c4b7dd36e659260669f1c02456696e572e7c4bd54ab1224a7ceac37fd582dba79b5dfffb1ff30da42190a75b3055860ec868a6635d87477cdda8a2839555845f1cf83357220e53919a8180dbecfba98b552b5dc49e8f2a31c37bc975b26290a277946fd85202081cbdee724565c79568489492b4d45ebc6765a1b8257a07d7ca2585133defc4e328864c9aa4cce3ed7b201650ffac153636caf8eaa295a05fea68af2ee26fdd037d625e4aed61abc569008df9f1b0cdf0ecb3cd537b0e1c8b376037f18e591a1f2c0da964b55015c92669ee648004f7ef4e79c12494ced91dc1d69ee594504064538df4ddcb57b19620c3a48c41ac7544a7f4bc6f6edca6fb5e8d6eb25e0747880b272a2f7f325ecd846689355c6f1e610433d19eb50022c424f4fd54cbe0fbaf59b5b5dff2c91913746f90d4cbc68c35dbc7d02dffc0f0dee294ab4a3e7ff422c5269be6492a3bad2caa4d172f07453d56df4a5b52a8bc3734b7012e7dca831acc3a4460359da6899923064fc6dc3a8bda7633742393c23c4fa8b2c4f4671010d14307131a0de09563b1e35ba34fa2644edcdbc051faf3409625a46b3d92f8022cf28f74e523b988e8d595c2b0b528a1617078e7db1b017bb312d8a6ff51f782cd4decc2ec1eb156ecfe4f1cb8ab0bf0adf1bddf745a9e8abdd2629d10e37a806bc7df1558cad0ccb1f286a49bd024fdfbede0a7283b12e73d347a490349da2d82412d9b050ebbd4f4985c9497dce6585d6f1388bd5b11769c46433d9cb764f282d6e7941d846078d2c77f1a6aad57812cb6c539ca94a203d80e1b62072ad57829eab7af0c9ac125f2ff46582e36d458716ee93fd6f749b471e48883fe892e4ba748a06fb2bb161465b103d7792feccd97b7fec335b7784e25f623026fb9eadead6a1e8ea5791ad004b84e16217baf8dee79e68ba96f913fb15ce43b7eb2a334fed05db7ac4ca47f96c2836809cdbc29c5a8bb052648b45cff7c456e14b2bd445e4fe3bd4da3b069c347a48c7a5d0d5ee76f06113df3f67c7b71118d0b7c8e3477f98c62ab584719aad32261492619b04b64b281abf929ba356021691378d3a2605a38ce09d3017ce8ca2d6cf9d13ac6e05095a8aa229af3352c8aeaeeb1fc136607d3c8d9d22537e08baac44194a6b26c44fb7b62f7a1224f70ac136baa12aa0f219391907b2bc3c67d9a5c0f7d6e7c6ce559268cb29620b360b2a56075bfdf809c9d697235c4ce1afa19e5f31ceb337f78e7556fd57f3b086206ceb875df45824c96f18c4fcaedbdb5cbefc8fbefc5a67d971d4f9657fc65af038d95169d74b48a602fb5e51dbdeafe741442c3eff913492baf5f6884d83698f000328ce889640a09f0a3ccd14d8006cc0b4b4f3d97bb92c4075110e00012760c98f38b6edea1ef83211f1d89592d5fcdb5ddaee1dd1052b9dd5c9f99de3f4e3e5ff4422846a2dbd897a564811290cb23d11f3c193512d84113e90a4fb48fc0712dbdf1530714cd1281c75c7886f185494295f9a2a90524e64822785de20a4228bba7bb15127a4b59544532c45315d51547e390a80d98efc8bbcca36368f741c69ea6e9aaf1be9a815e3448878bb80ff4498246ce1c4e93255ac483ac61145d37b69c570f6d0a660d04dad04d5103877d707c0ff60bfb488660852f52a3fbd818d3199d7419af5d2da3b810bc49fcac0831c4696f0fe29dc93726ff998ea27282729d710f9642b4b8de6a767ce98a3a706a2f1f5a7f4063cd3fa81c1af744a3083bc5362deb01d92169806ce1e5b9608c2e14a3195d58887a2d91b05d3ab6129a4b6780e2e0ad6d09662a001f2fa0c2b7482db16ceeee5de0fedf59c0808fd53a3884dc817885f6958fb79a7413fc344ceb8bcb4f3b771bdf5074bdd8f4f8031255bf242e19a2918692a06a9207b52ca472e1c06b60762ccd044d6fedf9b4373f28c0b7320867d1bed18fcd204b3325adc06fe0b08b4153432c80ce3bbcb742fae2fb7e593523225cff2de9bb8cecbf21794a430a7bb105e26ffb7cf39cc2af9be91b8eba062d8fd917dcb0f2192095352750881ae1ff0984b9564f306faaaf5168a78349efac80073b6cebcdb489bb58768f88a48e0f290a28b3e9b1854c910928df0e64dcccd7545a8e7209d8ac0f92d037b5fcd36899f77000d7694695bcee2145b217cde7b9b73012ae6e48392a27dd0e577af62ad91c68ceaed956c891c3ead5153ad0f9f84e84cbb0a740865ce18587c2743d0b49fde79f979a868908cd4077f9aaf12afb3cfe6dfd170654c5b8f003a0013e6c5c6ee3323949d156f48c99b50a060d3b4ec37369ce817dc5d7085e65daed45e0a9e5a8dcde82af0ca4526bb1c3e8c55954d40a88f9552c4101858fdc9e275e590a6b7e778acbc6ce157ac9345f5584c70b5927a2bfd00872d7f77f79c39c53f6f64aa6bb4019e95be733dc11fb79d97b8168b802dddbe87f9ff8d3af75a09883d2dacbbf184de212c171f4cd9ef6aef51c2ee4f8003bb40cca018538d61a60255238d989e11504b0c5e2ab6eaccfac31963cb080bc2165f29deeb28bb4c2fa6bb1f0de2fac3c10bbbc9dc54e1eeebcabe2b787de4b98649039fbf3092f947b33c637f7a0e6a8ebe48f98a7bcb4ad76162cb37d53817c53e71537e1e490570279a428cdafcb38ce19ee112070e681aeac75c298e35169e9940e3cb94a21f8f56b1c4da3cc2a4f1053ff108c3be652723b76399c4250f17fe45990dd3600fe60e038a449c860ee4d30545644b40ab7caefe09d0be9099281f273885b899fbfcbb19410a6968fb9843fb100b736accb0424b4c8d974db8b4c0e08a8a3bdc287ba2cbeade9863d9a932b7982f45108abc4bbdfd108b57ba43aa1343abc37d81aa8b3d78c2a61ec9dfd64a8b31c14f2dc48efff6a148a7c"}, 0x1004) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r3, 0x2f, 0x3f, 0x52, 0x0, 0x20, @empty, @remote, 0x1, 0x10, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x0, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x90, 0x0, 0xe, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x5fd7, 0xd9, &(0x7f0000000500)=""/217, 0x40f00, 0x1, '\x00', r4, 0x1f, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x7ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1]}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002d0008002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="080f0007400300f3ff06f8ff040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20040040) [ 3343.108433][T21114] workingset_restore_file 0 [ 3343.108433][T21114] workingset_nodereclaim 0 [ 3343.108433][T21114] pgscan 54842 [ 3343.108433][T21114] pgsteal 462 [ 3343.108433][T21114] pgscan_kswapd 0 [ 3343.108433][T21114] pgscan_direct 54842 [ 3343.108433][T21114] pgscan_khugepaged 0 [ 3343.108433][T21114] pgsteal_kswapd 0 [ 3343.108433][T21114] pgsteal_direct 462 [ 3343.108433][T21114] pgsteal_khugepaged 0 [ 3343.108433][T21114] pgfault 421623 [ 3343.108433][T21114] pgmajfault 1 [ 3343.108433][T21114] pgrefill 182221 [ 3343.108433][T21114] pgactivate 54341 [ 3343.108433][T21114] pgdeactivate 0 [ 3343.108433][T21114] pglazyfree 0 [ 3343.108433][T21114] pglazyfreed 0 [ 3343.108433][T21114] zswpin 0 [ 3343.108433][T21114] zswpout 0 [ 3343.527017][T21114] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21114,uid=0 [ 3343.543666][T21114] Memory cgroup out of memory: Killed process 21114 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:10 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x45510300) [ 3343.573614][T21118] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3343.594363][T21118] CPU: 1 PID: 21118 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3343.604867][T21118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3343.614976][T21118] Call Trace: [ 3343.618346][T21118] [ 3343.621346][T21118] dump_stack_lvl+0x136/0x150 [ 3343.626095][T21118] dump_header+0x10a/0xd70 [ 3343.630594][T21118] oom_kill_process+0x25d/0x600 [ 3343.635519][T21118] out_of_memory+0x35c/0x1660 [ 3343.640279][T21118] ? oom_killer_disable+0x2b0/0x2b0 [ 3343.645548][T21118] ? rcu_read_unlock+0x9/0x60 [ 3343.650301][T21118] ? find_held_lock+0x2d/0x110 [ 3343.655122][T21118] mem_cgroup_out_of_memory+0x206/0x270 [ 3343.660717][T21118] ? mem_cgroup_margin+0x130/0x130 [ 3343.665874][T21118] ? lock_downgrade+0x690/0x690 [ 3343.670778][T21118] try_charge_memcg+0xf9b/0x13b0 [ 3343.675949][T21118] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3343.682311][T21118] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3343.688088][T21118] ? lock_downgrade+0x690/0x690 [ 3343.692977][T21118] ? lock_downgrade+0x690/0x690 [ 3343.697871][T21118] obj_cgroup_charge+0x2af/0x5e0 [ 3343.702842][T21118] ? vm_area_dup+0x21/0x1f0 [ 3343.707373][T21118] kmem_cache_alloc+0xb1/0x3b0 [ 3343.712213][T21118] vm_area_dup+0x21/0x1f0 [ 3343.716579][T21118] __split_vma+0x199/0x810 [ 3343.721140][T21118] ? expand_stack+0x20/0x20 [ 3343.725683][T21118] ? vma_shrink+0x5b0/0x5b0 [ 3343.730234][T21118] ? mark_held_locks+0x9f/0xe0 [ 3343.735033][T21118] ? percpu_counter_add_batch+0x199/0x1e0 [ 3343.740805][T21118] ? lockdep_hardirqs_on+0x7d/0x100 [ 3343.746048][T21118] split_vma+0xc6/0x110 [ 3343.750254][T21118] mprotect_fixup+0x771/0xa60 [ 3343.754970][T21118] ? change_protection+0x3b30/0x3b30 [ 3343.760300][T21118] do_mprotect_pkey+0x935/0xc10 [ 3343.765193][T21118] ? mprotect_fixup+0xa60/0xa60 [ 3343.770080][T21118] ? up_write+0x1b4/0x520 [ 3343.774478][T21118] ? do_futex+0x360/0x360 [ 3343.778858][T21118] __x64_sys_mprotect+0x78/0xb0 [ 3343.783741][T21118] do_syscall_64+0x39/0xb0 [ 3343.788210][T21118] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3343.794247][T21118] RIP: 0033:0x7faa0ba8c277 [ 3343.798706][T21118] Code: 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0a 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3343.818358][T21118] RSP: 002b:00007ffd537cca88 EFLAGS: 00000206 ORIG_RAX: 000000000000000a [ 3343.826825][T21118] RAX: ffffffffffffffda RBX: 0000000000021000 RCX: 00007faa0ba8c277 [ 3343.834821][T21118] RDX: 0000000000000003 RSI: 0000000000020000 RDI: 00007faa0c891000 [ 3343.842901][T21118] RBP: 00007ffd537ccb60 R08: 00000000ffffffff R09: 00007faa0c8b0700 [ 3343.850899][T21118] R10: 0000000000020022 R11: 0000000000000206 R12: 00007ffd537ccc80 [ 3343.858893][T21118] R13: 00007faa0c8b0700 R14: 0000000000000000 R15: 0000000000022000 [ 3343.866920][T21118] [ 3343.877481][T21118] memory: usage 307200kB, limit 307200kB, failcnt 94562 [ 3343.890686][T21118] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3343.966344][T21118] Memory cgroup stats for /syz1: [ 3343.967018][T21118] anon 102400 [ 3343.967018][T21118] file 356352 [ 3343.967018][T21118] kernel 314114048 [ 3343.967018][T21118] kernel_stack 65536 [ 3343.967018][T21118] pagetables 81920 [ 3343.967018][T21118] sec_pagetables 0 [ 3343.967018][T21118] percpu 5424032 [ 3343.967018][T21118] sock 0 [ 3343.967018][T21118] vmalloc 16384 [ 3343.967018][T21118] shmem 339968 [ 3343.967018][T21118] zswap 0 [ 3343.967018][T21118] zswapped 0 [ 3343.967018][T21118] file_mapped 262144 [ 3343.967018][T21118] file_dirty 12288 [ 3343.967018][T21118] file_writeback 0 [ 3343.967018][T21118] swapcached 0 [ 3343.967018][T21118] anon_thp 0 [ 3343.967018][T21118] file_thp 0 [ 3343.967018][T21118] shmem_thp 0 [ 3343.967018][T21118] inactive_anon 49152 [ 3343.967018][T21118] active_anon 393216 [ 3343.967018][T21118] inactive_file 0 [ 3343.967018][T21118] active_file 16384 [ 3343.967018][T21118] unevictable 0 [ 3343.967018][T21118] slab_reclaimable 249224 [ 3343.967018][T21118] slab_unreclaimable 308237192 [ 3343.967018][T21118] slab 308486416 [ 3343.967018][T21118] workingset_refault_anon 0 [ 3343.967018][T21118] workingset_refault_file 4 [ 3343.967018][T21118] workingset_activate_anon 0 [ 3343.967018][T21118] workingset_activate_file 0 [ 3343.967018][T21118] workingset_restore_anon 0 [ 3343.967018][T21118] workingset_restore_file 2 [ 3343.967018][T21118] workingset_nodereclaim 0 [ 3343.967018][T21118] pgscan 79148 [ 3343.967018][T21118] pgsteal 600 [ 3343.967018][T21118] pgscan_kswapd 0 [ 3343.967018][T21118] pgscan_direct 79148 [ 3343.967018][T21118] pgscan_khugepaged 0 [ 3343.967018][T21118] pgsteal_kswapd 0 [ 3343.967018][T21118] pgsteal_direct 600 [ 3343.967018][T21118] pgsteal_khugepaged 0 [ 3343.967018][T21118] pgfault 409885 [ 3343.967018][T21118] pgmajfault 0 [ 3343.967018][T21118] pgrefill 214363 [ 3343.967018][T21118] pgactivate 78455 [ 3343.967018][T21118] pgdeactivate 0 [ 3343.967018][T21118] pglazyfree 0 [ 3343.967018][T21118] pglazyfreed 0 [ 3343.967018][T21118] zswpin 0 [ 3343.967018][T21118] zswpout 0 [ 3344.157928][T21118] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21118,uid=0 [ 3344.175082][T21118] Memory cgroup out of memory: Killed process 21118 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3344.226693][T21126] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3344.253746][T21126] CPU: 0 PID: 21126 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3344.264244][T21126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3344.274343][T21126] Call Trace: [ 3344.277659][T21126] [ 3344.280625][T21126] dump_stack_lvl+0x136/0x150 [ 3344.285367][T21126] dump_header+0x10a/0xd70 [ 3344.289846][T21126] oom_kill_process+0x25d/0x600 [ 3344.294760][T21126] out_of_memory+0x35c/0x1660 [ 3344.299508][T21126] ? oom_killer_disable+0x2b0/0x2b0 [ 3344.304768][T21126] ? rcu_read_unlock+0x9/0x60 [ 3344.309506][T21126] ? find_held_lock+0x2d/0x110 [ 3344.314350][T21126] mem_cgroup_out_of_memory+0x206/0x270 [ 3344.319966][T21126] ? mem_cgroup_margin+0x130/0x130 [ 3344.325145][T21126] ? lock_downgrade+0x690/0x690 [ 3344.330077][T21126] try_charge_memcg+0xf9b/0x13b0 [ 3344.335070][T21126] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3344.341106][T21126] ? rcu_read_unlock+0x9/0x60 [ 3344.345852][T21126] ? lock_downgrade+0x690/0x690 [ 3344.350777][T21126] charge_memcg+0x90/0x3b0 [ 3344.355231][T21126] __mem_cgroup_charge+0x2b/0x90 [ 3344.360205][T21126] __handle_mm_fault+0x1895/0x3e60 [ 3344.365360][T21126] ? vm_iomap_memory+0x190/0x190 [ 3344.370377][T21126] handle_mm_fault+0x2ba/0x9c0 [ 3344.375193][T21126] do_user_addr_fault+0x475/0x1230 [ 3344.380348][T21126] ? rcu_is_watching+0x12/0xb0 [ 3344.385153][T21126] exc_page_fault+0x98/0x170 [ 3344.389781][T21126] asm_exc_page_fault+0x26/0x30 [ 3344.394664][T21126] RIP: 0033:0x7fb9a042bde9 [ 3344.399109][T21126] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3344.418748][T21126] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 08:19:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x4c, 0x66, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xb, 0x3}, {0xc, 0x10}}, [{0x8, 0xb, 0x9db4}, {0x8, 0xb, 0x9f}, {0x8, 0xb, 0x300}, {0x8, 0xb, 0x1f24}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000090) 08:19:10 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd253030000000000) [ 3344.424842][T21126] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3344.432837][T21126] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3344.440830][T21126] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3344.448858][T21126] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 000000000032fce8 [ 3344.456859][T21126] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3344.464877][T21126] [ 3344.526623][T21126] memory: usage 307200kB, limit 307200kB, failcnt 80701 [ 3344.533656][T21126] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3344.570884][T21126] Memory cgroup stats for /syz0: [ 3344.571155][T21126] anon 131072 [ 3344.571155][T21126] file 364544 [ 3344.571155][T21126] kernel 314077184 [ 3344.571155][T21126] kernel_stack 65536 [ 3344.571155][T21126] pagetables 81920 [ 3344.571155][T21126] sec_pagetables 0 [ 3344.571155][T21126] percpu 5432256 [ 3344.571155][T21126] sock 0 [ 3344.571155][T21126] vmalloc 0 [ 3344.571155][T21126] shmem 344064 [ 3344.571155][T21126] zswap 0 [ 3344.571155][T21126] zswapped 0 [ 3344.571155][T21126] file_mapped 327680 [ 3344.571155][T21126] file_dirty 8192 [ 3344.571155][T21126] file_writeback 0 [ 3344.571155][T21126] swapcached 0 [ 3344.571155][T21126] anon_thp 0 [ 3344.571155][T21126] file_thp 0 [ 3344.571155][T21126] shmem_thp 0 [ 3344.571155][T21126] inactive_anon 57344 [ 3344.571155][T21126] active_anon 417792 [ 3344.571155][T21126] inactive_file 0 [ 3344.571155][T21126] active_file 20480 [ 3344.571155][T21126] unevictable 0 [ 3344.571155][T21126] slab_reclaimable 19208 [ 3344.571155][T21126] slab_unreclaimable 308446976 [ 3344.571155][T21126] slab 308466184 [ 3344.571155][T21126] workingset_refault_anon 0 [ 3344.571155][T21126] workingset_refault_file 4 [ 3344.571155][T21126] workingset_activate_anon 0 [ 3344.571155][T21126] workingset_activate_file 0 [ 3344.571155][T21126] workingset_restore_anon 0 [ 3344.571155][T21126] workingset_restore_file 1 [ 3344.571155][T21126] workingset_nodereclaim 0 [ 3344.571155][T21126] pgscan 62084 [ 3344.571155][T21126] pgsteal 567 [ 3344.571155][T21126] pgscan_kswapd 0 [ 3344.571155][T21126] pgscan_direct 62084 [ 3344.571155][T21126] pgscan_khugepaged 0 [ 3344.571155][T21126] pgsteal_kswapd 0 [ 3344.571155][T21126] pgsteal_direct 567 [ 3344.571155][T21126] pgsteal_khugepaged 0 [ 3344.571155][T21126] pgfault 437286 [ 3344.571155][T21126] pgmajfault 2 [ 3344.571155][T21126] pgrefill 199857 [ 3344.571155][T21126] pgactivate 61420 [ 3344.571155][T21126] pgdeactivate 0 [ 3344.571155][T21126] pglazyfree 0 [ 3344.571155][T21126] pglazyfreed 0 [ 3344.571155][T21126] zswpin 0 [ 3344.571155][T21126] zswpout 0 [ 3344.760655][T21126] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21126,uid=0 [ 3344.783717][T21126] Memory cgroup out of memory: Killed process 21126 (syz-executor.0) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3344.802428][T21128] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3344.816803][T21128] CPU: 0 PID: 21128 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3344.827300][T21128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3344.837388][T21128] Call Trace: [ 3344.840696][T21128] [ 3344.843652][T21128] dump_stack_lvl+0x136/0x150 [ 3344.848368][T21128] dump_header+0x10a/0xd70 [ 3344.852844][T21128] oom_kill_process+0x25d/0x600 [ 3344.857743][T21128] out_of_memory+0x35c/0x1660 [ 3344.862470][T21128] ? oom_killer_disable+0x2b0/0x2b0 [ 3344.867852][T21128] ? rcu_read_unlock+0x9/0x60 [ 3344.872579][T21128] ? find_held_lock+0x2d/0x110 [ 3344.877518][T21128] mem_cgroup_out_of_memory+0x206/0x270 [ 3344.883108][T21128] ? mem_cgroup_margin+0x130/0x130 [ 3344.888262][T21128] ? lock_downgrade+0x690/0x690 [ 3344.893163][T21128] try_charge_memcg+0xf9b/0x13b0 [ 3344.898141][T21128] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3344.904159][T21128] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3344.910017][T21128] ? lock_downgrade+0x690/0x690 [ 3344.914907][T21128] ? lock_downgrade+0x690/0x690 [ 3344.919826][T21128] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3344.925411][T21128] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3344.931625][T21128] copy_process+0x4e3/0x7590 [ 3344.936262][T21128] ? __lock_acquire+0xbc5/0x5d40 [ 3344.941247][T21128] ? __cleanup_sighand+0xb0/0xb0 [ 3344.946221][T21128] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3344.952241][T21128] ? psi_memstall_leave+0x174/0x250 [ 3344.957506][T21128] ? lock_downgrade+0x690/0x690 [ 3344.962416][T21128] kernel_clone+0xeb/0x890 [ 3344.966876][T21128] ? create_io_thread+0xf0/0xf0 [ 3344.971777][T21128] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3344.978155][T21128] ? lock_downgrade+0x690/0x690 [ 3344.983054][T21128] __do_sys_clone+0xba/0x100 [ 3344.987682][T21128] ? kernel_clone+0x890/0x890 [ 3344.992413][T21128] ? syscall_enter_from_user_mode+0x26/0x80 [ 3344.998352][T21128] do_syscall_64+0x39/0xb0 [ 3345.002813][T21128] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3345.008743][T21128] RIP: 0033:0x7f461ea8d591 [ 3345.013200][T21128] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3345.032928][T21128] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3345.041371][T21128] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3345.049542][T21128] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3345.057534][T21128] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3345.065529][T21128] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede 08:19:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xffffffe4) [ 3345.073524][T21128] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3345.081543][T21128] [ 3345.102733][T21128] memory: usage 307184kB, limit 307200kB, failcnt 82060 [ 3345.110230][T21128] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3345.117945][T21128] Memory cgroup stats for /syz3: [ 3345.118204][T21128] anon 86016 [ 3345.118204][T21128] file 364544 [ 3345.118204][T21128] kernel 314105856 [ 3345.118204][T21128] kernel_stack 32768 [ 3345.118204][T21128] pagetables 69632 [ 3345.118204][T21128] sec_pagetables 0 [ 3345.118204][T21128] percpu 5432256 [ 3345.118204][T21128] sock 0 [ 3345.118204][T21128] vmalloc 8192 [ 3345.118204][T21128] shmem 339968 [ 3345.118204][T21128] zswap 0 [ 3345.118204][T21128] zswapped 0 [ 3345.118204][T21128] file_mapped 327680 [ 3345.118204][T21128] file_dirty 24576 [ 3345.118204][T21128] file_writeback 0 [ 3345.118204][T21128] swapcached 0 [ 3345.118204][T21128] anon_thp 0 [ 3345.118204][T21128] file_thp 0 [ 3345.118204][T21128] shmem_thp 0 [ 3345.118204][T21128] inactive_anon 401408 [ 3345.118204][T21128] active_anon 24576 [ 3345.118204][T21128] inactive_file 0 [ 3345.118204][T21128] active_file 24576 [ 3345.118204][T21128] unevictable 0 [ 3345.118204][T21128] slab_reclaimable 37184 [ 3345.118204][T21128] slab_unreclaimable 308482544 [ 3345.118204][T21128] slab 308519728 [ 3345.118204][T21128] workingset_refault_anon 0 [ 3345.118204][T21128] workingset_refault_file 2 [ 3345.118204][T21128] workingset_activate_anon 0 [ 3345.118204][T21128] workingset_activate_file 0 [ 3345.118204][T21128] workingset_restore_anon 0 [ 3345.118204][T21128] workingset_restore_file 0 [ 3345.118204][T21128] workingset_nodereclaim 0 [ 3345.118204][T21128] pgscan 56129 [ 3345.118204][T21128] pgsteal 455 [ 3345.118204][T21128] pgscan_kswapd 0 [ 3345.118204][T21128] pgscan_direct 56129 [ 3345.118204][T21128] pgscan_khugepaged 0 [ 3345.118204][T21128] pgsteal_kswapd 0 [ 3345.118204][T21128] pgsteal_direct 455 [ 3345.118204][T21128] pgsteal_khugepaged 0 [ 3345.118204][T21128] pgfault 416054 [ 3345.118204][T21128] pgmajfault 1 [ 3345.118204][T21128] pgrefill 210102 [ 3345.118204][T21128] pgactivate 55665 [ 3345.118204][T21128] pgdeactivate 0 [ 3345.118204][T21128] pglazyfree 0 [ 3345.118204][T21128] pglazyfreed 0 [ 3345.118204][T21128] zswpin 0 [ 3345.118204][T21128] zswpout 0 [ 3345.311599][T21128] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21128,uid=0 [ 3345.327818][T21128] Memory cgroup out of memory: Killed process 21128 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3345.345826][T21129] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3345.364471][T21129] CPU: 1 PID: 21129 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 08:19:11 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4a009105}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x34, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff3, 0xfff2}, {0x10, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_delroute={0x160, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x6, 0xfd, 0x0, 0xfd, 0x5, 0x1800}, [@RTA_UID={0x8, 0x19, 0xee01}, @RTA_METRICS={0xda, 0x8, 0x0, 0x1, "3501e4ef3b17c2b790f1251a25a377f6a8c1e5d3e55d9788afc90d0fe1fb52a62467e6ebfb871a92cc85803a7246b3579d1fa8255d05a25ace44c1f410a9195d71bd71a0014016c138a4df16e265c4accdacf806d8398e14962d458219f35aa0bfbcd9c9c12fd9a01235fd8196629f0fe588e54f9c91444057246e2f2441927ce7b00151483e07cb3e1007a7e50bb8c0e280ae2705a37957749ff2fd32b68e6ecb343cd7e68a9091ff8f935b6c2d3748d9b4d9b6c4bf7916837dc9d166a5083c3a034da3f1303d24ffccf24650b80a2f78a585c72ba9"}, @RTA_MARK={0x8, 0x10, 0x800}, @RTA_METRICS={0x50, 0x8, 0x0, 0x1, "746b335cb9afe252c4920e3ee4444023cc7ae4acb11018f55e9e008f9e81ba06d293843a9c1df2ef929002d2252776b262a71b7d4fe3997e7e66fba551495ca4bc06a136b47f74c7a46f97fd"}, @RTA_TABLE={0x8}]}, 0x160}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, 0x0, 0x3) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) write$binfmt_misc(r1, &(0x7f0000000800)={'syz0', "e391db57c72202b9bff88496e1f3e7634132d245fcbdbfc5c52e36c78d8204893d066703e9e9af6108201bcd085585f3f14c440f49b3f6c9eff60015c955d1231df719e541234b9909d06d5dae51a3dc625792c4d897e6164148e630f720636dd90ab2dbc396b73477afa3d64b13d762565d2228d611ac9fc32abfe4b8fef23e8ef0742061be90710ad54928a3b710c59a73918b4937a73211450f3fbbd26b86fe8d7fda72a4c122f2932ff91fcdcf4760c2d722498cf872b395d270f31c2c6a1195a47d02f83696b2c0f4e8ff99751705913750db478e950a31798512d016e6c85f6820f79a67775f2f6bf3fb43783d0bfa936df271d42b167faf784cb187176d47b579b8cb2ddb50222523b9c4b355324b9792505ee1917c2e99d449eea5364c4bdfdfd173a52e8b50024fe0ba3054b0f4cca5004c2322731c23a7f8b272f8f6610e68905d3115bc208b346af0bf4d7bf7f56b8255d907e29d64be54e054b1b0db610934e552e5d36350a009d7fb64d0c56806daadd0023ace57947c4c6cc0a83432250169c00605b42a3bb01499340b6b1a3c5d60e92ec3b769697cd1037b277313d45055bcd7dadbcc2ecb14dc1dd11e81771abfbeeb7b4170921ce7c4e54e76878a8274e4f0d5de9eee106e170ea14db322e9a7872732295394036795e81af259b4f03bc54f6aadce5a00063da1937eaa952fb7e6df29096b9f44c33d3f70dcf9c3c1a91dc9c7d2f257dd135384beb818647009a47ad94317c8c829abc0d0d6d70b7a6d36329c264e3c75453a5e507364949443f7465d345c848fff8b58fd4b4985e13065ec035063620a09e620fcfa6064e77e9ee67d8905f91f84d6a3de564ebd8e840e9800663345b23b4496e383205dc7f4ab1814092add220d61396b38c851f08a0fd823569c5fe901405d0ced437bd8f732b0fc05caf4908138b62c25505c5fa8f9f3fe311417ba1fae65d2ba38ec6c376bfd1fc00bc34e2f81b62883fa450dd2f3359a1f18bca6f44a1a42709f5d9b2f14a71b94c356ed03ada5fe156e14e1791991fd7c52f64b142d2f5bab7da3ec986dd7957aed892c6b8d3b2e12581c39f0d9d87359028a6d130b9e0247ff4350ba1bd05e9943e6730a7d641a62351a5ca69f563bce2c17613e41b0510726b2520803406315ab600c8b2b03bdb9935c2ffbbb5676c82757c8083c965290b83cf6b65b7b6bb3c9b01391205368b2731930155aee09a2acbebed2d909ee76e99e1b6f158ac79a3a7d34577290e1c362f2d16d22376917590b985262112d37ddc99d14ac82f446fd94115cf936be1b55d4d8090defd0883934e54fceb3ae2190d2b139b0dc9063ef68f80fd15e4034c36cd1bf1d3f606f61159a4a93517c908ad4f2ded52d04f1b3940912b4f34e7496a0c75c35195c46cf736b8638b8101852cb75caa7dc4966e6cec84e8f55a26f80cef8a86f48b361a8b99d09895e5ab08973dcf8dc541ae4eb1f7231f85a1589d281b735aaf1affc8754548a181eb2cd851ec2e4ced2808e62307ef7265ba2abbc17ed18586eed326fab674a2cbf81674fc21315dbe560e1686b1a0648ad734c547ae5137f224e5e0aa6c36716df0c8017e422d58f3332216a75e86992aae0c581630c51a2b1b116d6b0c26fb6c3044657f736c8b37f6bc59ce80b23ab5f5d77bdbff90200b0d258a8079df87cf6301f803d5377f08a78d58258b9bcf2ad0afcde1e57c0d2b143c3a9a2a43ca5b4e161918a607cd731498b4d8322fb83ff8945e17b5e02b6f883a0519c964970c0e092f06e98fa0c321f263a5ff5a33d64de6174b2746fbda60e5d7ea0ed76b3610fdb5bec0564a68e08be25f7e81fbfb1e155f69745cf2e767433a09213bc4b3acab5e76eb1ccddc585735374570130163420e16797db76cc4fd285ad44ac2782071f4ea8b05bf0eee8dbbc9c17f4855bd1da8489b3edee4f3e626bd57f26a54af4738fa43401e4ddbb91447db041cc3041429b748bc22bca015f38ccb42a19e4b20778d46c0f9106c75c76e33bee73737c97a287f2f21f2948921c64f148bafdf016b3b375547e6b639c09bc98be4ce4a9a438b153ad66fa2c2594402b93c6e123f49bfa8e6d4b994c7e41defa16cd8678445463f883b34049a297e5d6850db036670e7e8f0b84ab3e813462f9907f2fdc3667c878a5e9ddba595b20afc457eb866f3426eb244c4e09fec676afbed5f495d2482dac23a407fe69d3c0417c713c426c29e8751afd326827c7a9a5c8b09aaf6055aecae6e6390b55e7befb90b9412e87ec57313fb8bf3335a04dfcd401caf287ed47511fa3a350919459a5a152e00b5b4e61818f4209332a82dd077780bad3c7f547dadff294da43e69808c9607efdc7605e585995ac596390b7c4db86bc8f6e1f65ecc57d7f383708de2d67adf4dbcc5ab59cced77f0ab0fd376b39f52e4a449198c7f477ccca6d42cd23ae9d5865c0885b86e2e1981b979b7da9be3da6a6a557a84b301efcaf232e034db0d9d1ccd03b8a2cab021f05e58ba20981e46b27f42608818fbb5704e788d25a7686b04e5d74ba40693061b23cb215dca27261e8658d8be7bed68f12b3a06ab35573b755275da8aa8354ed924bedf6bcc57bfa8123e788eb2c1381d3b9c45df21589912d9fcfeea8d719056046b5dd6139f498a3a33960c7efe5c61db1d68ec4b03610a54e74f3acf8aeab6275887c796553343501f29431af06b63cd3bd969a53b24a6fbb35a613b7a477082db73d9939df959fdf2ef839ce26e47edf11d563eb5e8edbde17cfc1ddb3665af4d420d2b3c27ecf60550ea28b1d15e276867c5d1083eaa1d9e9c59aacd2325e0febf30eefdfdf9b0034141db2ade3f854634fa8c3a3efae1e79c4b7dd36e659260669f1c02456696e572e7c4bd54ab1224a7ceac37fd582dba79b5dfffb1ff30da42190a75b3055860ec868a6635d87477cdda8a2839555845f1cf83357220e53919a8180dbecfba98b552b5dc49e8f2a31c37bc975b26290a277946fd85202081cbdee724565c79568489492b4d45ebc6765a1b8257a07d7ca2585133defc4e328864c9aa4cce3ed7b201650ffac153636caf8eaa295a05fea68af2ee26fdd037d625e4aed61abc569008df9f1b0cdf0ecb3cd537b0e1c8b376037f18e591a1f2c0da964b55015c92669ee648004f7ef4e79c12494ced91dc1d69ee594504064538df4ddcb57b19620c3a48c41ac7544a7f4bc6f6edca6fb5e8d6eb25e0747880b272a2f7f325ecd846689355c6f1e610433d19eb50022c424f4fd54cbe0fbaf59b5b5dff2c91913746f90d4cbc68c35dbc7d02dffc0f0dee294ab4a3e7ff422c5269be6492a3bad2caa4d172f07453d56df4a5b52a8bc3734b7012e7dca831acc3a4460359da6899923064fc6dc3a8bda7633742393c23c4fa8b2c4f4671010d14307131a0de09563b1e35ba34fa2644edcdbc051faf3409625a46b3d92f8022cf28f74e523b988e8d595c2b0b528a1617078e7db1b017bb312d8a6ff51f782cd4decc2ec1eb156ecfe4f1cb8ab0bf0adf1bddf745a9e8abdd2629d10e37a806bc7df1558cad0ccb1f286a49bd024fdfbede0a7283b12e73d347a490349da2d82412d9b050ebbd4f4985c9497dce6585d6f1388bd5b11769c46433d9cb764f282d6e7941d846078d2c77f1a6aad57812cb6c539ca94a203d80e1b62072ad57829eab7af0c9ac125f2ff46582e36d458716ee93fd6f749b471e48883fe892e4ba748a06fb2bb161465b103d7792feccd97b7fec335b7784e25f623026fb9eadead6a1e8ea5791ad004b84e16217baf8dee79e68ba96f913fb15ce43b7eb2a334fed05db7ac4ca47f96c2836809cdbc29c5a8bb052648b45cff7c456e14b2bd445e4fe3bd4da3b069c347a48c7a5d0d5ee76f06113df3f67c7b71118d0b7c8e3477f98c62ab584719aad32261492619b04b64b281abf929ba356021691378d3a2605a38ce09d3017ce8ca2d6cf9d13ac6e05095a8aa229af3352c8aeaeeb1fc136607d3c8d9d22537e08baac44194a6b26c44fb7b62f7a1224f70ac136baa12aa0f219391907b2bc3c67d9a5c0f7d6e7c6ce559268cb29620b360b2a56075bfdf809c9d697235c4ce1afa19e5f31ceb337f78e7556fd57f3b086206ceb875df45824c96f18c4fcaedbdb5cbefc8fbefc5a67d971d4f9657fc65af038d95169d74b48a602fb5e51dbdeafe741442c3eff913492baf5f6884d83698f000328ce889640a09f0a3ccd14d8006cc0b4b4f3d97bb92c4075110e00012760c98f38b6edea1ef83211f1d89592d5fcdb5ddaee1dd1052b9dd5c9f99de3f4e3e5ff4422846a2dbd897a564811290cb23d11f3c193512d84113e90a4fb48fc0712dbdf1530714cd1281c75c7886f185494295f9a2a90524e64822785de20a4228bba7bb15127a4b59544532c45315d51547e390a80d98efc8bbcca36368f741c69ea6e9aaf1be9a815e3448878bb80ff4498246ce1c4e93255ac483ac61145d37b69c570f6d0a660d04dad04d5103877d707c0ff60bfb488660852f52a3fbd818d3199d7419af5d2da3b810bc49fcac0831c4696f0fe29dc93726ff998ea27282729d710f9642b4b8de6a767ce98a3a706a2f1f5a7f4063cd3fa81c1af744a3083bc5362deb01d92169806ce1e5b9608c2e14a3195d58887a2d91b05d3ab6129a4b6780e2e0ad6d09662a001f2fa0c2b7482db16ceeee5de0fedf59c0808fd53a3884dc817885f6958fb79a7413fc344ceb8bcb4f3b771bdf5074bdd8f4f8031255bf242e19a2918692a06a9207b52ca472e1c06b60762ccd044d6fedf9b4373f28c0b7320867d1bed18fcd204b3325adc06fe0b08b4153432c80ce3bbcb742fae2fb7e593523225cff2de9bb8cecbf21794a430a7bb105e26ffb7cf39cc2af9be91b8eba062d8fd917dcb0f2192095352750881ae1ff0984b9564f306faaaf5168a78349efac80073b6cebcdb489bb58768f88a48e0f290a28b3e9b1854c910928df0e64dcccd7545a8e7209d8ac0f92d037b5fcd36899f77000d7694695bcee2145b217cde7b9b73012ae6e48392a27dd0e577af62ad91c68ceaed956c891c3ead5153ad0f9f84e84cbb0a740865ce18587c2743d0b49fde79f979a868908cd4077f9aaf12afb3cfe6dfd170654c5b8f003a0013e6c5c6ee3323949d156f48c99b50a060d3b4ec37369ce817dc5d7085e65daed45e0a9e5a8dcde82af0ca4526bb1c3e8c55954d40a88f9552c4101858fdc9e275e590a6b7e778acbc6ce157ac9345f5584c70b5927a2bfd00872d7f77f79c39c53f6f64aa6bb4019e95be733dc11fb79d97b8168b802dddbe87f9ff8d3af75a09883d2dacbbf184de212c171f4cd9ef6aef51c2ee4f8003bb40cca018538d61a60255238d989e11504b0c5e2ab6eaccfac31963cb080bc2165f29deeb28bb4c2fa6bb1f0de2fac3c10bbbc9dc54e1eeebcabe2b787de4b98649039fbf3092f947b33c637f7a0e6a8ebe48f98a7bcb4ad76162cb37d53817c53e71537e1e490570279a428cdafcb38ce19ee112070e681aeac75c298e35169e9940e3cb94a21f8f56b1c4da3cc2a4f1053ff108c3be652723b76399c4250f17fe45990dd3600fe60e038a449c860ee4d30545644b40ab7caefe09d0be9099281f273885b899fbfcbb19410a6968fb9843fb100b736accb0424b4c8d974db8b4c0e08a8a3bdc287ba2cbeade9863d9a932b7982f45108abc4bbdfd108b57ba43aa1343abc37d81aa8b3d78c2a61ec9dfd64a8b31c14f2dc48efff6a148a7c"}, 0x1004) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r3, 0x2f, 0x3f, 0x52, 0x0, 0x20, @empty, @remote, 0x1, 0x10, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x0, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x90, 0x0, 0xe, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x5fd7, 0xd9, &(0x7f0000000500)=""/217, 0x40f00, 0x1, '\x00', r4, 0x1f, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x7ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1]}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002d0008002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="080f0007400300f3ff06f8ff040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20040040) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4a009105}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@deltclass={0x34, 0x29, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff3, 0xfff2}, {0x10, 0xffff}}, [@tclass_kind_options=@c_fq_codel={0xd}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@ipv4_delroute={0x160, 0x19, 0x8, 0x70bd29, 0x25dfdbfd, {0x2, 0x14, 0x80, 0x6, 0xfd, 0x0, 0xfd, 0x5, 0x1800}, [@RTA_UID={0x8, 0x19, 0xee01}, @RTA_METRICS={0xda, 0x8, 0x0, 0x1, "3501e4ef3b17c2b790f1251a25a377f6a8c1e5d3e55d9788afc90d0fe1fb52a62467e6ebfb871a92cc85803a7246b3579d1fa8255d05a25ace44c1f410a9195d71bd71a0014016c138a4df16e265c4accdacf806d8398e14962d458219f35aa0bfbcd9c9c12fd9a01235fd8196629f0fe588e54f9c91444057246e2f2441927ce7b00151483e07cb3e1007a7e50bb8c0e280ae2705a37957749ff2fd32b68e6ecb343cd7e68a9091ff8f935b6c2d3748d9b4d9b6c4bf7916837dc9d166a5083c3a034da3f1303d24ffccf24650b80a2f78a585c72ba9"}, @RTA_MARK={0x8, 0x10, 0x800}, @RTA_METRICS={0x50, 0x8, 0x0, 0x1, "746b335cb9afe252c4920e3ee4444023cc7ae4acb11018f55e9e008f9e81ba06d293843a9c1df2ef929002d2252776b262a71b7d4fe3997e7e66fba551495ca4bc06a136b47f74c7a46f97fd"}, @RTA_TABLE={0x8}]}, 0x160}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) write$binfmt_elf32(r2, 0x0, 0x3) (async) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0xfd74) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14) (async) write$binfmt_misc(r1, &(0x7f0000000800)={'syz0', "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"}, 0x1004) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000680)={'syztnl1\x00', &(0x7f0000000600)={'syztnl0\x00', r3, 0x2f, 0x3f, 0x52, 0x0, 0x20, @empty, @remote, 0x1, 0x10, 0x0, 0x1}}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2, &(0x7f00000002c0)=@raw=[@alu={0x7, 0x1, 0x6, 0x0, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @generic={0x90, 0x0, 0xe, 0x0, 0x1}], &(0x7f00000004c0)='syzkaller\x00', 0x5fd7, 0xd9, &(0x7f0000000500)=""/217, 0x40f00, 0x1, '\x00', r4, 0x1f, r1, 0x8, &(0x7f00000006c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000700)={0x5, 0x8, 0x7ff, 0x81}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1]}, 0x80) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002d0008002cbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="080f0007400300f3ff06f8ff040000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4048044}, 0x20040040) (async) [ 3345.374978][T21129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3345.385087][T21129] Call Trace: [ 3345.388409][T21129] [ 3345.391382][T21129] dump_stack_lvl+0x136/0x150 [ 3345.396122][T21129] dump_header+0x10a/0xd70 [ 3345.400610][T21129] oom_kill_process+0x25d/0x600 [ 3345.405547][T21129] out_of_memory+0x35c/0x1660 [ 3345.410300][T21129] ? oom_killer_disable+0x2b0/0x2b0 [ 3345.415564][T21129] ? rcu_read_unlock+0x9/0x60 [ 3345.420306][T21129] ? find_held_lock+0x2d/0x110 [ 3345.425152][T21129] mem_cgroup_out_of_memory+0x206/0x270 [ 3345.430773][T21129] ? mem_cgroup_margin+0x130/0x130 [ 3345.435969][T21129] ? lock_downgrade+0x690/0x690 [ 3345.440917][T21129] try_charge_memcg+0xf9b/0x13b0 [ 3345.445932][T21129] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3345.451992][T21129] ? rcu_read_unlock+0x9/0x60 [ 3345.456773][T21129] ? lock_downgrade+0x690/0x690 [ 3345.461710][T21129] charge_memcg+0x90/0x3b0 [ 3345.466201][T21129] __mem_cgroup_charge+0x2b/0x90 [ 3345.471211][T21129] ? copy_mc_to_kernel+0x3e/0x90 [ 3345.476240][T21129] do_wp_page+0x8eb/0x3520 [ 3345.480732][T21129] ? lock_release+0x670/0x670 [ 3345.485470][T21129] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3345.490900][T21129] ? do_raw_spin_lock+0x124/0x2b0 [ 3345.495956][T21129] ? spin_bug+0x1c0/0x1c0 [ 3345.500311][T21129] ? lock_downgrade+0x690/0x690 [ 3345.505198][T21129] __handle_mm_fault+0x19a1/0x3e60 [ 3345.510441][T21129] ? vm_iomap_memory+0x190/0x190 [ 3345.515439][T21129] handle_mm_fault+0x2ba/0x9c0 [ 3345.520251][T21129] do_user_addr_fault+0x475/0x1230 [ 3345.525417][T21129] ? rcu_is_watching+0x12/0xb0 [ 3345.530240][T21129] exc_page_fault+0x98/0x170 [ 3345.534916][T21129] asm_exc_page_fault+0x26/0x30 [ 3345.539801][T21129] RIP: 0033:0x7f9ac62366e5 [ 3345.544242][T21129] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3345.563977][T21129] RSP: 002b:00007ffc61d0e9d0 EFLAGS: 00010206 [ 3345.570084][T21129] RAX: 0000000000000003 RBX: 00007f9ac63abf80 RCX: 00007f9ac63a80c0 [ 3345.578103][T21129] RDX: 00007f9ac63a80c0 RSI: 0000000000000080 RDI: 00007f9ac63abf80 [ 3345.586101][T21129] RBP: 00007f9ac63abf80 R08: 00007ffc61d6c080 R09: 0000000000000000 [ 3345.594098][T21129] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 000000000032ff34 [ 3345.602204][T21129] R13: 00007ffc61d0eae0 R14: 00007f9ac63abf80 R15: 0000000000000032 [ 3345.610261][T21129] [ 3345.619787][T21129] memory: usage 307200kB, limit 307200kB, failcnt 71232 [ 3345.627855][T21129] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3345.635241][T21129] Memory cgroup stats for /syz2: [ 3345.635509][T21129] anon 94208 [ 3345.635509][T21129] file 364544 [ 3345.635509][T21129] kernel 314093568 [ 3345.635509][T21129] kernel_stack 65536 [ 3345.635509][T21129] pagetables 69632 [ 3345.635509][T21129] sec_pagetables 0 [ 3345.635509][T21129] percpu 5428704 [ 3345.635509][T21129] sock 0 [ 3345.635509][T21129] vmalloc 0 [ 3345.635509][T21129] shmem 348160 [ 3345.635509][T21129] zswap 0 [ 3345.635509][T21129] zswapped 0 [ 3345.635509][T21129] file_mapped 311296 [ 3345.635509][T21129] file_dirty 16384 [ 3345.635509][T21129] file_writeback 0 [ 3345.635509][T21129] swapcached 0 [ 3345.635509][T21129] anon_thp 0 [ 3345.635509][T21129] file_thp 0 [ 3345.635509][T21129] shmem_thp 0 [ 3345.635509][T21129] inactive_anon 40960 [ 3345.635509][T21129] active_anon 401408 [ 3345.635509][T21129] inactive_file 12288 [ 3345.635509][T21129] active_file 4096 [ 3345.635509][T21129] unevictable 0 [ 3345.635509][T21129] slab_reclaimable 218152 [ 3345.635509][T21129] slab_unreclaimable 308288848 [ 3345.635509][T21129] slab 308507000 [ 3345.635509][T21129] workingset_refault_anon 0 [ 3345.635509][T21129] workingset_refault_file 0 [ 3345.635509][T21129] workingset_activate_anon 0 [ 3345.635509][T21129] workingset_activate_file 0 [ 3345.635509][T21129] workingset_restore_anon 0 [ 3345.635509][T21129] workingset_restore_file 0 [ 3345.635509][T21129] workingset_nodereclaim 0 [ 3345.635509][T21129] pgscan 54843 [ 3345.635509][T21129] pgsteal 463 [ 3345.635509][T21129] pgscan_kswapd 0 [ 3345.635509][T21129] pgscan_direct 54843 [ 3345.635509][T21129] pgscan_khugepaged 0 [ 3345.635509][T21129] pgsteal_kswapd 0 [ 3345.635509][T21129] pgsteal_direct 463 [ 3345.635509][T21129] pgsteal_khugepaged 0 [ 3345.635509][T21129] pgfault 421665 [ 3345.635509][T21129] pgmajfault 1 [ 3345.635509][T21129] pgrefill 182451 [ 3345.635509][T21129] pgactivate 54341 [ 3345.635509][T21129] pgdeactivate 0 [ 3345.635509][T21129] pglazyfree 0 [ 3345.635509][T21129] pglazyfreed 0 [ 3345.635509][T21129] zswpin 0 [ 3345.635509][T21129] zswpout 0 08:19:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd94b0300) [ 3345.823971][T21129] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21129,uid=0 [ 3345.852131][T21129] Memory cgroup out of memory: Killed process 21129 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3345.893416][T21132] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3345.914089][T21132] CPU: 1 PID: 21132 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3345.925197][T21132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3345.935465][T21132] Call Trace: [ 3345.938770][T21132] [ 3345.941725][T21132] dump_stack_lvl+0x136/0x150 [ 3345.946448][T21132] dump_header+0x10a/0xd70 [ 3345.950909][T21132] oom_kill_process+0x25d/0x600 [ 3345.955801][T21132] out_of_memory+0x35c/0x1660 [ 3345.960538][T21132] ? oom_killer_disable+0x2b0/0x2b0 [ 3345.965781][T21132] ? rcu_read_unlock+0x9/0x60 [ 3345.970499][T21132] ? find_held_lock+0x2d/0x110 [ 3345.975497][T21132] mem_cgroup_out_of_memory+0x206/0x270 [ 3345.981101][T21132] ? mem_cgroup_margin+0x130/0x130 [ 3345.986259][T21132] ? lock_downgrade+0x690/0x690 [ 3345.991170][T21132] try_charge_memcg+0xf9b/0x13b0 [ 3345.996151][T21132] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3346.002165][T21132] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3346.007968][T21132] ? lock_downgrade+0x690/0x690 [ 3346.013033][T21132] ? lock_downgrade+0x690/0x690 [ 3346.017934][T21132] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3346.023520][T21132] __alloc_pages+0x1f3/0x4a0 [ 3346.028144][T21132] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3346.034964][T21132] ? __lock_acquire+0xbc5/0x5d40 [ 3346.039961][T21132] alloc_pages+0x1aa/0x270 [ 3346.044430][T21132] __pmd_alloc+0x3f/0x5d0 [ 3346.048800][T21132] __handle_mm_fault+0x932/0x3e60 [ 3346.053873][T21132] ? vm_iomap_memory+0x190/0x190 [ 3346.058894][T21132] handle_mm_fault+0x2ba/0x9c0 [ 3346.063710][T21132] do_user_addr_fault+0x475/0x1230 [ 3346.068961][T21132] ? rcu_is_watching+0x12/0xb0 [ 3346.073856][T21132] exc_page_fault+0x98/0x170 [ 3346.078488][T21132] asm_exc_page_fault+0x26/0x30 [ 3346.083401][T21132] RIP: 0033:0x7faa0ba2bde9 [ 3346.087843][T21132] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3346.107485][T21132] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3346.113596][T21132] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3346.121686][T21132] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3346.130123][T21132] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 08:19:12 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x46510300) [ 3346.138123][T21132] R10: 00007faa0b600068 R11: 0000000000000246 R12: 00000000003301b0 [ 3346.146121][T21132] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3346.154138][T21132] [ 3346.165594][T21132] memory: usage 307200kB, limit 307200kB, failcnt 94668 [ 3346.173009][T21132] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3346.180093][T21132] Memory cgroup stats for /syz1: [ 3346.180370][T21132] anon 126976 [ 3346.180370][T21132] file 360448 [ 3346.180370][T21132] kernel 314085376 [ 3346.180370][T21132] kernel_stack 65536 [ 3346.180370][T21132] pagetables 73728 [ 3346.180370][T21132] sec_pagetables 0 [ 3346.180370][T21132] percpu 5424032 [ 3346.180370][T21132] sock 0 [ 3346.180370][T21132] vmalloc 16384 [ 3346.180370][T21132] shmem 339968 [ 3346.180370][T21132] zswap 0 [ 3346.180370][T21132] zswapped 0 [ 3346.180370][T21132] file_mapped 262144 [ 3346.180370][T21132] file_dirty 12288 [ 3346.180370][T21132] file_writeback 0 [ 3346.180370][T21132] swapcached 0 [ 3346.180370][T21132] anon_thp 0 [ 3346.180370][T21132] file_thp 0 [ 3346.180370][T21132] shmem_thp 0 [ 3346.180370][T21132] inactive_anon 40960 [ 3346.180370][T21132] active_anon 425984 [ 3346.180370][T21132] inactive_file 0 [ 3346.180370][T21132] active_file 20480 [ 3346.180370][T21132] unevictable 0 [ 3346.180370][T21132] slab_reclaimable 245848 [ 3346.180370][T21132] slab_unreclaimable 308229768 [ 3346.180370][T21132] slab 308475616 [ 3346.180370][T21132] workingset_refault_anon 0 [ 3346.180370][T21132] workingset_refault_file 4 [ 3346.180370][T21132] workingset_activate_anon 0 [ 3346.180370][T21132] workingset_activate_file 0 [ 3346.180370][T21132] workingset_restore_anon 0 [ 3346.180370][T21132] workingset_restore_file 2 [ 3346.180370][T21132] workingset_nodereclaim 0 [ 3346.180370][T21132] pgscan 79272 [ 3346.180370][T21132] pgsteal 600 [ 3346.180370][T21132] pgscan_kswapd 0 [ 3346.180370][T21132] pgscan_direct 79272 [ 3346.180370][T21132] pgscan_khugepaged 0 [ 3346.180370][T21132] pgsteal_kswapd 0 [ 3346.180370][T21132] pgsteal_direct 600 [ 3346.180370][T21132] pgsteal_khugepaged 0 [ 3346.180370][T21132] pgfault 409944 [ 3346.180370][T21132] pgmajfault 0 [ 3346.180370][T21132] pgrefill 214786 [ 3346.180370][T21132] pgactivate 78579 [ 3346.180370][T21132] pgdeactivate 0 [ 3346.180370][T21132] pglazyfree 0 [ 3346.180370][T21132] pglazyfreed 0 [ 3346.180370][T21132] zswpin 0 [ 3346.180370][T21132] zswpout 0 [ 3346.374587][T21132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21132,uid=0 [ 3346.391858][T21132] Memory cgroup out of memory: Killed process 21132 (syz-executor.1) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x4c, 0x66, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xb, 0x3}, {0xc, 0x10}}, [{0x8, 0xb, 0x9db4}, {0x8, 0xb, 0x9f}, {0x8, 0xb, 0x300}, {0x8, 0xb, 0x1f24}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000090) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x4c, 0x66, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xb, 0x3}, {0xc, 0x10}}, [{0x8, 0xb, 0x9db4}, {0x8, 0xb, 0x9f}, {0x8, 0xb, 0x300}, {0x8, 0xb, 0x1f24}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000090) (async) [ 3346.437328][T21134] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3346.458414][T21134] CPU: 1 PID: 21134 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3346.468921][T21134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3346.479200][T21134] Call Trace: [ 3346.482504][T21134] [ 3346.485543][T21134] dump_stack_lvl+0x136/0x150 [ 3346.490263][T21134] dump_header+0x10a/0xd70 [ 3346.494727][T21134] oom_kill_process+0x25d/0x600 [ 3346.499628][T21134] out_of_memory+0x35c/0x1660 [ 3346.504454][T21134] ? find_held_lock+0x2d/0x110 [ 3346.509271][T21134] ? oom_killer_disable+0x2b0/0x2b0 [ 3346.514527][T21134] ? rcu_read_unlock+0x9/0x60 [ 3346.519246][T21134] ? find_held_lock+0x2d/0x110 [ 3346.524073][T21134] mem_cgroup_out_of_memory+0x206/0x270 [ 3346.529671][T21134] ? mem_cgroup_margin+0x130/0x130 [ 3346.534827][T21134] ? lock_downgrade+0x690/0x690 [ 3346.539741][T21134] try_charge_memcg+0xf9b/0x13b0 [ 3346.544717][T21134] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3346.550734][T21134] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3346.556589][T21134] ? lock_downgrade+0x690/0x690 [ 3346.561485][T21134] ? lock_downgrade+0x690/0x690 [ 3346.566565][T21134] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3346.572149][T21134] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3346.578385][T21134] copy_process+0x4e3/0x7590 [ 3346.583019][T21134] ? __lock_acquire+0xbc5/0x5d40 [ 3346.588057][T21134] ? __cleanup_sighand+0xb0/0xb0 [ 3346.593045][T21134] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3346.599064][T21134] ? psi_memstall_leave+0x174/0x250 [ 3346.604308][T21134] ? lock_downgrade+0x690/0x690 [ 3346.609209][T21134] kernel_clone+0xeb/0x890 [ 3346.613668][T21134] ? create_io_thread+0xf0/0xf0 [ 3346.618561][T21134] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3346.624856][T21134] ? lock_downgrade+0x690/0x690 [ 3346.629766][T21134] __do_sys_clone+0xba/0x100 [ 3346.634395][T21134] ? kernel_clone+0x890/0x890 [ 3346.639128][T21134] ? syscall_enter_from_user_mode+0x26/0x80 [ 3346.645085][T21134] do_syscall_64+0x39/0xb0 [ 3346.649549][T21134] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3346.655486][T21134] RIP: 0033:0x7f79ea88d591 [ 3346.659929][T21134] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3346.679575][T21134] RSP: 002b:00007ffd939e5c88 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3346.688026][T21134] RAX: ffffffffffffffda RBX: 00007f79e93fe700 RCX: 00007f79ea88d591 [ 3346.696036][T21134] RDX: 00007f79e93fe9d0 RSI: 00007f79e93fe2f0 RDI: 00000000003d0f00 [ 3346.704034][T21134] RBP: 00007ffd939e5ed0 R08: 00007f79e93fe700 R09: 00007f79e93fe700 [ 3346.712032][T21134] R10: 00007f79e93fe9d0 R11: 0000000000000206 R12: 00007ffd939e5d3e [ 3346.720028][T21134] R13: 00007ffd939e5d3f R14: 00007f79e93fe300 R15: 0000000000022000 [ 3346.728053][T21134] [ 3346.759836][T21134] memory: usage 307200kB, limit 307200kB, failcnt 77872 [ 3346.782865][T21134] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3346.809495][T21134] Memory cgroup stats for /syz4: [ 3346.809777][T21134] anon 106496 [ 3346.809777][T21134] file 323584 [ 3346.809777][T21134] kernel 314142720 [ 3346.809777][T21134] kernel_stack 65536 [ 3346.809777][T21134] pagetables 81920 [ 3346.809777][T21134] sec_pagetables 0 [ 3346.809777][T21134] percpu 5432256 [ 3346.809777][T21134] sock 0 [ 3346.809777][T21134] vmalloc 0 [ 3346.809777][T21134] shmem 311296 [ 3346.809777][T21134] zswap 0 [ 3346.809777][T21134] zswapped 0 [ 3346.809777][T21134] file_mapped 311296 [ 3346.809777][T21134] file_dirty 8192 [ 3346.809777][T21134] file_writeback 0 [ 3346.809777][T21134] swapcached 0 [ 3346.809777][T21134] anon_thp 0 [ 3346.809777][T21134] file_thp 0 [ 3346.809777][T21134] shmem_thp 0 [ 3346.809777][T21134] inactive_anon 32768 [ 3346.809777][T21134] active_anon 385024 [ 3346.809777][T21134] inactive_file 8192 [ 3346.809777][T21134] active_file 4096 [ 3346.809777][T21134] unevictable 0 [ 3346.809777][T21134] slab_reclaimable 17160 [ 3346.809777][T21134] slab_unreclaimable 308495296 [ 3346.809777][T21134] slab 308512456 [ 3346.809777][T21134] workingset_refault_anon 0 [ 3346.809777][T21134] workingset_refault_file 0 [ 3346.809777][T21134] workingset_activate_anon 0 [ 3346.809777][T21134] workingset_activate_file 0 [ 3346.809777][T21134] workingset_restore_anon 0 [ 3346.809777][T21134] workingset_restore_file 0 [ 3346.809777][T21134] workingset_nodereclaim 0 [ 3346.809777][T21134] pgscan 50307 [ 3346.809777][T21134] pgsteal 490 [ 3346.809777][T21134] pgscan_kswapd 0 [ 3346.809777][T21134] pgscan_direct 50307 [ 3346.809777][T21134] pgscan_khugepaged 0 [ 3346.809777][T21134] pgsteal_kswapd 0 [ 3346.809777][T21134] pgsteal_direct 490 [ 3346.809777][T21134] pgsteal_khugepaged 0 [ 3346.809777][T21134] pgfault 404940 [ 3346.809777][T21134] pgmajfault 1 [ 3346.809777][T21134] pgrefill 139160 [ 3346.809777][T21134] pgactivate 49756 [ 3346.809777][T21134] pgdeactivate 0 [ 3346.809777][T21134] pglazyfree 0 [ 3346.809777][T21134] pglazyfreed 0 [ 3346.809777][T21134] zswpin 0 [ 3346.809777][T21134] zswpout 0 08:19:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfffffff0) 08:19:13 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd353030000000000) [ 3347.024608][T21134] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21134,uid=0 [ 3347.041113][T21134] Memory cgroup out of memory: Killed process 21134 (syz-executor.4) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3347.060295][T21138] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3347.080390][T21138] CPU: 1 PID: 21138 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3347.090905][T21138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3347.101035][T21138] Call Trace: [ 3347.104353][T21138] [ 3347.107412][T21138] dump_stack_lvl+0x136/0x150 [ 3347.112168][T21138] dump_header+0x10a/0xd70 [ 3347.116709][T21138] oom_kill_process+0x25d/0x600 [ 3347.121635][T21138] out_of_memory+0x35c/0x1660 [ 3347.126405][T21138] ? oom_killer_disable+0x2b0/0x2b0 [ 3347.131761][T21138] ? rcu_read_unlock+0x9/0x60 [ 3347.136511][T21138] ? find_held_lock+0x2d/0x110 [ 3347.141361][T21138] mem_cgroup_out_of_memory+0x206/0x270 [ 3347.146999][T21138] ? mem_cgroup_margin+0x130/0x130 [ 3347.152186][T21138] ? lock_downgrade+0x690/0x690 [ 3347.157130][T21138] try_charge_memcg+0xf9b/0x13b0 [ 3347.162133][T21138] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3347.168186][T21138] ? rcu_read_unlock+0x9/0x60 [ 3347.172939][T21138] ? lock_downgrade+0x690/0x690 [ 3347.177882][T21138] charge_memcg+0x90/0x3b0 [ 3347.182366][T21138] __mem_cgroup_charge+0x2b/0x90 [ 3347.187367][T21138] do_wp_page+0x8eb/0x3520 [ 3347.191856][T21138] ? lock_release+0x670/0x670 [ 3347.196600][T21138] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3347.202047][T21138] ? do_raw_spin_lock+0x124/0x2b0 [ 3347.207139][T21138] ? spin_bug+0x1c0/0x1c0 [ 3347.211527][T21138] ? lock_downgrade+0x690/0x690 [ 3347.216457][T21138] __handle_mm_fault+0x19a1/0x3e60 [ 3347.226493][T21138] ? vm_iomap_memory+0x190/0x190 [ 3347.231506][T21138] handle_mm_fault+0x2ba/0x9c0 [ 3347.236330][T21138] do_user_addr_fault+0x475/0x1230 [ 3347.241481][T21138] ? rcu_is_watching+0x12/0xb0 [ 3347.246323][T21138] exc_page_fault+0x98/0x170 [ 3347.250974][T21138] asm_exc_page_fault+0x26/0x30 [ 3347.255857][T21138] RIP: 0033:0x7f0e44a39610 [ 3347.260294][T21138] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3347.280016][T21138] RSP: 002b:00007ffc44a97870 EFLAGS: 00010246 [ 3347.286117][T21138] RAX: 00000000010d554f RBX: 00007f0e44bac018 RCX: 0000001b2ce20000 [ 3347.294147][T21138] RDX: 0000000000000000 RSI: 0000001b2ce20018 RDI: 000000000c7c3a95 [ 3347.302193][T21138] RBP: 00000000010d554f R08: 000000000000154f R09: 00000000010d5553 [ 3347.310191][T21138] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 00007f0e44ba0000 [ 3347.318240][T21138] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff87f9ca8c [ 3347.326253][T21138] ? __sys_socket+0x7c/0x250 [ 3347.330905][T21138] [ 3347.336451][T21138] memory: usage 307200kB, limit 307200kB, failcnt 74308 [ 3347.351040][T21138] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3347.358394][T21138] Memory cgroup stats for /syz5: [ 3347.358603][T21138] anon 102400 [ 3347.358603][T21138] file 356352 [ 3347.358603][T21138] kernel 314114048 [ 3347.358603][T21138] kernel_stack 65536 [ 3347.358603][T21138] pagetables 73728 [ 3347.358603][T21138] sec_pagetables 0 [ 3347.358603][T21138] percpu 5432688 [ 3347.358603][T21138] sock 0 [ 3347.358603][T21138] vmalloc 20480 [ 3347.358603][T21138] shmem 344064 [ 3347.358603][T21138] zswap 0 [ 3347.358603][T21138] zswapped 0 [ 3347.358603][T21138] file_mapped 327680 [ 3347.358603][T21138] file_dirty 12288 [ 3347.358603][T21138] file_writeback 0 [ 3347.358603][T21138] swapcached 0 [ 3347.358603][T21138] anon_thp 0 [ 3347.358603][T21138] file_thp 0 [ 3347.358603][T21138] shmem_thp 0 [ 3347.358603][T21138] inactive_anon 32768 [ 3347.358603][T21138] active_anon 413696 [ 3347.358603][T21138] inactive_file 12288 [ 3347.358603][T21138] active_file 0 [ 3347.358603][T21138] unevictable 0 [ 3347.358603][T21138] slab_reclaimable 14640 [ 3347.358603][T21138] slab_unreclaimable 308476352 [ 3347.358603][T21138] slab 308490992 [ 3347.358603][T21138] workingset_refault_anon 0 [ 3347.358603][T21138] workingset_refault_file 1 [ 3347.358603][T21138] workingset_activate_anon 0 [ 3347.358603][T21138] workingset_activate_file 0 [ 3347.358603][T21138] workingset_restore_anon 0 [ 3347.358603][T21138] workingset_restore_file 0 [ 3347.358603][T21138] workingset_nodereclaim 0 [ 3347.358603][T21138] pgscan 43030 [ 3347.358603][T21138] pgsteal 455 [ 3347.358603][T21138] pgscan_kswapd 0 [ 3347.358603][T21138] pgscan_direct 43030 [ 3347.358603][T21138] pgscan_khugepaged 0 [ 3347.358603][T21138] pgsteal_kswapd 0 [ 3347.358603][T21138] pgsteal_direct 455 [ 3347.358603][T21138] pgsteal_khugepaged 0 [ 3347.358603][T21138] pgfault 412049 [ 3347.358603][T21138] pgmajfault 0 [ 3347.358603][T21138] pgrefill 142149 [ 3347.358603][T21138] pgactivate 42560 [ 3347.358603][T21138] pgdeactivate 0 [ 3347.358603][T21138] pglazyfree 0 [ 3347.358603][T21138] pglazyfreed 0 [ 3347.358603][T21138] zswpin 0 [ 3347.358603][T21138] zswpout 0 [ 3347.551432][T21138] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21138,uid=0 08:19:14 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xda030000) [ 3347.572092][T21138] Memory cgroup out of memory: Killed process 21138 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3347.597016][T21141] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3347.616098][T21141] CPU: 0 PID: 21141 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3347.626612][T21141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3347.636735][T21141] Call Trace: [ 3347.640059][T21141] [ 3347.643037][T21141] dump_stack_lvl+0x136/0x150 [ 3347.647866][T21141] dump_header+0x10a/0xd70 [ 3347.652361][T21141] oom_kill_process+0x25d/0x600 [ 3347.657292][T21141] out_of_memory+0x35c/0x1660 [ 3347.662063][T21141] ? oom_killer_disable+0x2b0/0x2b0 [ 3347.667426][T21141] ? rcu_read_unlock+0x9/0x60 [ 3347.672201][T21141] ? find_held_lock+0x2d/0x110 [ 3347.677066][T21141] mem_cgroup_out_of_memory+0x206/0x270 [ 3347.682697][T21141] ? mem_cgroup_margin+0x130/0x130 [ 3347.687888][T21141] ? lock_downgrade+0x690/0x690 [ 3347.692826][T21141] try_charge_memcg+0xf9b/0x13b0 [ 3347.697838][T21141] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3347.703891][T21141] ? rcu_read_unlock+0x9/0x60 [ 3347.708663][T21141] ? lock_downgrade+0x690/0x690 [ 3347.713603][T21141] charge_memcg+0x90/0x3b0 [ 3347.718109][T21141] __mem_cgroup_charge+0x2b/0x90 [ 3347.723116][T21141] do_wp_page+0x8eb/0x3520 [ 3347.727609][T21141] ? lock_release+0x670/0x670 [ 3347.732498][T21141] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3347.737927][T21141] ? do_raw_spin_lock+0x124/0x2b0 [ 3347.743008][T21141] ? spin_bug+0x1c0/0x1c0 [ 3347.747403][T21141] ? lock_downgrade+0x690/0x690 [ 3347.752293][T21141] __handle_mm_fault+0x19a1/0x3e60 [ 3347.757450][T21141] ? vm_iomap_memory+0x190/0x190 [ 3347.762532][T21141] handle_mm_fault+0x2ba/0x9c0 [ 3347.767352][T21141] do_user_addr_fault+0x475/0x1230 [ 3347.772537][T21141] ? rcu_is_watching+0x12/0xb0 [ 3347.777372][T21141] exc_page_fault+0x98/0x170 [ 3347.782006][T21141] asm_exc_page_fault+0x26/0x30 [ 3347.786897][T21141] RIP: 0033:0x7f9ac6239610 [ 3347.791398][T21141] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3347.811063][T21141] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3347.817168][T21141] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3347.825195][T21141] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3347.833231][T21141] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3347.841255][T21141] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3347.849255][T21141] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3347.857345][T21141] ? __x64_sys_socket+0x11/0xb0 [ 3347.862280][T21141] [ 3347.878757][T21141] memory: usage 307200kB, limit 307200kB, failcnt 71345 [ 3347.885943][T21141] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3347.893162][T21141] Memory cgroup stats for /syz2: [ 3347.893429][T21141] anon 98304 [ 3347.893429][T21141] file 364544 [ 3347.893429][T21141] kernel 314109952 [ 3347.893429][T21141] kernel_stack 65536 [ 3347.893429][T21141] pagetables 69632 [ 3347.893429][T21141] sec_pagetables 0 [ 3347.893429][T21141] percpu 5428768 [ 3347.893429][T21141] sock 0 [ 3347.893429][T21141] vmalloc 0 [ 3347.893429][T21141] shmem 348160 [ 3347.893429][T21141] zswap 0 [ 3347.893429][T21141] zswapped 0 [ 3347.893429][T21141] file_mapped 311296 [ 3347.893429][T21141] file_dirty 16384 [ 3347.893429][T21141] file_writeback 0 [ 3347.893429][T21141] swapcached 0 [ 3347.893429][T21141] anon_thp 0 [ 3347.893429][T21141] file_thp 0 [ 3347.893429][T21141] shmem_thp 0 [ 3347.893429][T21141] inactive_anon 24576 [ 3347.893429][T21141] active_anon 421888 [ 3347.893429][T21141] inactive_file 12288 [ 3347.893429][T21141] active_file 4096 [ 3347.893429][T21141] unevictable 0 [ 3347.893429][T21141] slab_reclaimable 218152 [ 3347.893429][T21141] slab_unreclaimable 308298080 [ 3347.893429][T21141] slab 308516232 [ 3347.893429][T21141] workingset_refault_anon 0 [ 3347.893429][T21141] workingset_refault_file 0 [ 3347.893429][T21141] workingset_activate_anon 0 [ 3347.893429][T21141] workingset_activate_file 0 [ 3347.893429][T21141] workingset_restore_anon 0 [ 3347.893429][T21141] workingset_restore_file 0 [ 3347.893429][T21141] workingset_nodereclaim 0 [ 3347.893429][T21141] pgscan 54843 [ 3347.893429][T21141] pgsteal 463 [ 3347.893429][T21141] pgscan_kswapd 0 [ 3347.893429][T21141] pgscan_direct 54843 [ 3347.893429][T21141] pgscan_khugepaged 0 [ 3347.893429][T21141] pgsteal_kswapd 0 [ 3347.893429][T21141] pgsteal_direct 463 [ 3347.893429][T21141] pgsteal_khugepaged 0 [ 3347.893429][T21141] pgfault 421709 [ 3347.893429][T21141] pgmajfault 1 [ 3347.893429][T21141] pgrefill 182771 [ 3347.893429][T21141] pgactivate 54341 [ 3347.893429][T21141] pgdeactivate 0 [ 3347.893429][T21141] pglazyfree 0 [ 3347.893429][T21141] pglazyfreed 0 [ 3347.893429][T21141] zswpin 0 [ 3347.893429][T21141] zswpout 0 [ 3348.083467][T21141] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21141,uid=0 [ 3348.099616][T21141] Memory cgroup out of memory: Killed process 21141 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:14 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x47510300) [ 3348.126396][T21143] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3348.158613][T21143] CPU: 0 PID: 21143 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3348.169120][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3348.179250][T21143] Call Trace: [ 3348.182584][T21143] [ 3348.185564][T21143] dump_stack_lvl+0x136/0x150 [ 3348.190319][T21143] dump_header+0x10a/0xd70 [ 3348.194817][T21143] oom_kill_process+0x25d/0x600 [ 3348.199746][T21143] out_of_memory+0x35c/0x1660 [ 3348.204509][T21143] ? oom_killer_disable+0x2b0/0x2b0 [ 3348.209782][T21143] ? rcu_read_unlock+0x9/0x60 [ 3348.214539][T21143] ? find_held_lock+0x2d/0x110 [ 3348.219394][T21143] mem_cgroup_out_of_memory+0x206/0x270 [ 3348.225015][T21143] ? mem_cgroup_margin+0x130/0x130 [ 3348.230168][T21143] ? lock_downgrade+0x690/0x690 [ 3348.235162][T21143] try_charge_memcg+0xf9b/0x13b0 [ 3348.240146][T21143] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3348.246179][T21143] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3348.251949][T21143] ? lock_downgrade+0x690/0x690 [ 3348.256853][T21143] ? lock_downgrade+0x690/0x690 [ 3348.261748][T21143] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3348.267343][T21143] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3348.273538][T21143] copy_process+0x13a7/0x7590 [ 3348.278251][T21143] ? find_held_lock+0x2d/0x110 [ 3348.283075][T21143] ? __cleanup_sighand+0xb0/0xb0 [ 3348.288144][T21143] ? lock_downgrade+0x690/0x690 [ 3348.293040][T21143] ? folio_flags.constprop.0+0x53/0x150 [ 3348.298639][T21143] ? folio_add_lru+0x47f/0x7c0 [ 3348.303456][T21143] kernel_clone+0xeb/0x890 [ 3348.307935][T21143] ? create_io_thread+0xf0/0xf0 [ 3348.312831][T21143] ? vm_iomap_memory+0x190/0x190 [ 3348.317815][T21143] ? find_held_lock+0x2d/0x110 [ 3348.322640][T21143] __do_sys_clone+0xba/0x100 [ 3348.327270][T21143] ? kernel_clone+0x890/0x890 [ 3348.332001][T21143] ? syscall_enter_from_user_mode+0x26/0x80 [ 3348.337941][T21143] do_syscall_64+0x39/0xb0 [ 3348.342423][T21143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3348.348357][T21143] RIP: 0033:0x7faa0ba8d591 [ 3348.352795][T21143] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3348.372435][T21143] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3348.380897][T21143] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3348.388893][T21143] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3348.396890][T21143] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 08:19:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfffffffc) [ 3348.404885][T21143] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3348.412882][T21143] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3348.420898][T21143] 08:19:14 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x6c}}, 0x801) [ 3348.536082][T21143] memory: usage 307184kB, limit 307200kB, failcnt 94827 [ 3348.546960][T21143] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3348.554264][T21143] Memory cgroup stats for /syz1: [ 3348.554551][T21143] anon 102400 [ 3348.554551][T21143] file 356352 [ 3348.554551][T21143] kernel 314097664 [ 3348.554551][T21143] kernel_stack 65536 [ 3348.554551][T21143] pagetables 81920 [ 3348.554551][T21143] sec_pagetables 0 [ 3348.554551][T21143] percpu 5423968 [ 3348.554551][T21143] sock 0 [ 3348.554551][T21143] vmalloc 16384 [ 3348.554551][T21143] shmem 339968 [ 3348.554551][T21143] zswap 0 [ 3348.554551][T21143] zswapped 0 [ 3348.554551][T21143] file_mapped 262144 [ 3348.554551][T21143] file_dirty 12288 [ 3348.554551][T21143] file_writeback 0 [ 3348.554551][T21143] swapcached 0 [ 3348.554551][T21143] anon_thp 0 [ 3348.554551][T21143] file_thp 0 [ 3348.554551][T21143] shmem_thp 0 [ 3348.554551][T21143] inactive_anon 45056 [ 3348.554551][T21143] active_anon 397312 [ 3348.554551][T21143] inactive_file 0 [ 3348.554551][T21143] active_file 16384 [ 3348.554551][T21143] unevictable 0 [ 3348.554551][T21143] slab_reclaimable 245608 [ 3348.554551][T21143] slab_unreclaimable 308226616 [ 3348.554551][T21143] slab 308472224 [ 3348.554551][T21143] workingset_refault_anon 0 [ 3348.554551][T21143] workingset_refault_file 4 [ 3348.554551][T21143] workingset_activate_anon 0 [ 3348.554551][T21143] workingset_activate_file 0 [ 3348.554551][T21143] workingset_restore_anon 0 [ 3348.554551][T21143] workingset_restore_file 2 [ 3348.554551][T21143] workingset_nodereclaim 0 [ 3348.554551][T21143] pgscan 79392 [ 3348.554551][T21143] pgsteal 601 [ 3348.554551][T21143] pgscan_kswapd 0 [ 3348.554551][T21143] pgscan_direct 79392 [ 3348.554551][T21143] pgscan_khugepaged 0 [ 3348.554551][T21143] pgsteal_kswapd 0 [ 3348.554551][T21143] pgsteal_direct 601 [ 3348.554551][T21143] pgsteal_khugepaged 0 [ 3348.554551][T21143] pgfault 409987 [ 3348.554551][T21143] pgmajfault 0 [ 3348.554551][T21143] pgrefill 215473 [ 3348.554551][T21143] pgactivate 78698 [ 3348.554551][T21143] pgdeactivate 0 [ 3348.554551][T21143] pglazyfree 0 [ 3348.554551][T21143] pglazyfreed 0 [ 3348.554551][T21143] zswpin 0 [ 3348.554551][T21143] zswpout 0 [ 3348.754102][T21143] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21143,uid=0 [ 3348.770174][T21143] Memory cgroup out of memory: Killed process 21143 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:19:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@getchain={0x4c, 0x66, 0x100, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x3, 0xfff1}, {0xb, 0x3}, {0xc, 0x10}}, [{0x8, 0xb, 0x9db4}, {0x8, 0xb, 0x9f}, {0x8, 0xb, 0x300}, {0x8, 0xb, 0x1f24}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x24000090) [ 3348.796990][T21152] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3348.829868][T21152] CPU: 0 PID: 21152 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3348.840391][T21152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3348.850502][T21152] Call Trace: [ 3348.853830][T21152] [ 3348.856804][T21152] dump_stack_lvl+0x136/0x150 [ 3348.861546][T21152] dump_header+0x10a/0xd70 [ 3348.866054][T21152] oom_kill_process+0x25d/0x600 [ 3348.870982][T21152] out_of_memory+0x35c/0x1660 [ 3348.875748][T21152] ? oom_killer_disable+0x2b0/0x2b0 [ 3348.881021][T21152] ? rcu_read_unlock+0x9/0x60 [ 3348.885745][T21152] ? find_held_lock+0x2d/0x110 [ 3348.890650][T21152] mem_cgroup_out_of_memory+0x206/0x270 [ 3348.896286][T21152] ? mem_cgroup_margin+0x130/0x130 [ 3348.901455][T21152] ? lock_downgrade+0x690/0x690 [ 3348.906356][T21152] try_charge_memcg+0xf9b/0x13b0 [ 3348.911335][T21152] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3348.917440][T21152] ? rcu_read_unlock+0x9/0x60 [ 3348.922156][T21152] ? lock_downgrade+0x690/0x690 [ 3348.927066][T21152] charge_memcg+0x90/0x3b0 [ 3348.931529][T21152] __mem_cgroup_charge+0x2b/0x90 [ 3348.936508][T21152] __handle_mm_fault+0x1895/0x3e60 [ 3348.941674][T21152] ? vm_iomap_memory+0x190/0x190 [ 3348.946719][T21152] handle_mm_fault+0x2ba/0x9c0 [ 3348.951531][T21152] do_user_addr_fault+0x475/0x1230 [ 3348.956703][T21152] ? rcu_is_watching+0x12/0xb0 [ 3348.961659][T21152] exc_page_fault+0x98/0x170 [ 3348.966303][T21152] asm_exc_page_fault+0x26/0x30 [ 3348.971240][T21152] RIP: 0033:0x7fb9a042bde9 [ 3348.975693][T21152] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3348.995352][T21152] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 [ 3349.001459][T21152] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3349.009460][T21152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3349.017465][T21152] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3349.025555][T21152] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 0000000000331113 [ 3349.033659][T21152] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3349.041689][T21152] [ 3349.092758][T21152] memory: usage 307200kB, limit 307200kB, failcnt 80997 [ 3349.104477][T21152] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3349.119243][T21152] Memory cgroup stats for /syz0: [ 3349.119521][T21152] anon 131072 [ 3349.119521][T21152] file 368640 [ 3349.119521][T21152] kernel 314073088 [ 3349.119521][T21152] kernel_stack 65536 [ 3349.119521][T21152] pagetables 81920 [ 3349.119521][T21152] sec_pagetables 0 [ 3349.119521][T21152] percpu 5432256 [ 3349.119521][T21152] sock 0 [ 3349.119521][T21152] vmalloc 0 [ 3349.119521][T21152] shmem 344064 [ 3349.119521][T21152] zswap 0 [ 3349.119521][T21152] zswapped 0 [ 3349.119521][T21152] file_mapped 327680 [ 3349.119521][T21152] file_dirty 12288 [ 3349.119521][T21152] file_writeback 0 [ 3349.119521][T21152] swapcached 0 [ 3349.119521][T21152] anon_thp 0 [ 3349.119521][T21152] file_thp 0 [ 3349.119521][T21152] shmem_thp 0 [ 3349.119521][T21152] inactive_anon 65536 [ 3349.119521][T21152] active_anon 409600 [ 3349.119521][T21152] inactive_file 0 [ 3349.119521][T21152] active_file 24576 [ 3349.119521][T21152] unevictable 0 [ 3349.119521][T21152] slab_reclaimable 19448 [ 3349.119521][T21152] slab_unreclaimable 308446976 [ 3349.119521][T21152] slab 308466424 [ 3349.119521][T21152] workingset_refault_anon 0 [ 3349.119521][T21152] workingset_refault_file 4 [ 3349.119521][T21152] workingset_activate_anon 0 [ 3349.119521][T21152] workingset_activate_file 0 [ 3349.119521][T21152] workingset_restore_anon 0 [ 3349.119521][T21152] workingset_restore_file 1 [ 3349.119521][T21152] workingset_nodereclaim 0 [ 3349.119521][T21152] pgscan 62697 [ 3349.119521][T21152] pgsteal 569 [ 3349.119521][T21152] pgscan_kswapd 0 [ 3349.119521][T21152] pgscan_direct 62697 [ 3349.119521][T21152] pgscan_khugepaged 0 [ 3349.119521][T21152] pgsteal_kswapd 0 [ 3349.119521][T21152] pgsteal_direct 569 [ 3349.119521][T21152] pgsteal_khugepaged 0 [ 3349.119521][T21152] pgfault 437468 [ 3349.119521][T21152] pgmajfault 2 [ 3349.119521][T21152] pgrefill 200839 [ 3349.119521][T21152] pgactivate 62031 [ 3349.119521][T21152] pgdeactivate 0 [ 3349.119521][T21152] pglazyfree 0 [ 3349.119521][T21152] pglazyfreed 0 [ 3349.119521][T21152] zswpin 0 [ 3349.119521][T21152] zswpout 0 [ 3349.188931][T21158] warn_alloc: 6 callbacks suppressed [ 3349.188955][T21158] syz-executor.1: vmalloc error: size 0, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3349.323773][T21152] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3349.324144][T21158] ,cpuset= [ 3349.349322][T21152] ,cpuset= [ 3349.349353][T21158] syz1 [ 3349.355540][T21152] syz0 [ 3349.355858][T21158] ,mems_allowed=0-1 [ 3349.364973][T21152] ,mems_allowed=0-1 [ 3349.368275][T21158] CPU: 1 PID: 21158 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3349.371661][T21152] ,oom_memcg= [ 3349.372150][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3349.390102][T21152] /syz0 [ 3349.395950][T21158] Call Trace: [ 3349.395964][T21158] [ 3349.395978][T21158] dump_stack_lvl+0x136/0x150 [ 3349.402728][T21152] ,task_memcg= [ 3349.405066][T21158] warn_alloc+0x213/0x360 [ 3349.405111][T21158] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3349.413850][T21152] /syz0 [ 3349.417523][T21158] __vmalloc_node_range+0x1021/0x14a0 [ 3349.431312][T21158] ? alloc_netdev_mqs+0x9c/0x1250 [ 3349.436399][T21158] ? delayed_vfree_work+0x70/0x70 [ 3349.441478][T21158] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3349.447085][T21158] ? kvmalloc_node+0x76/0x1a0 [ 3349.451790][T21158] ? rcu_is_watching+0x12/0xb0 [ 3349.456599][T21158] ? alloc_netdev_mqs+0x9c/0x1250 [ 3349.461675][T21158] kvmalloc_node+0x156/0x1a0 [ 3349.466307][T21158] ? alloc_netdev_mqs+0x9c/0x1250 [ 3349.471372][T21158] alloc_netdev_mqs+0x9c/0x1250 [ 3349.476277][T21158] ? security_capable+0x93/0xc0 [ 3349.481156][T21158] ? br_netpoll_disable+0x60/0x60 [ 3349.486228][T21158] rtnl_create_link+0xbeb/0xee0 [ 3349.491131][T21158] __rtnl_newlink+0xfd4/0x1840 [ 3349.495955][T21158] ? rtnl_link_unregister+0x250/0x250 [ 3349.501394][T21158] ? asm_exc_int3+0x39/0x40 [ 3349.505979][T21158] ? rtnl_newlink+0x4a/0xa0 [ 3349.510534][T21158] rtnl_newlink+0x68/0xa0 [ 3349.514903][T21158] ? __rtnl_newlink+0x1840/0x1840 [ 3349.519969][T21158] rtnetlink_rcv_msg+0x43d/0xd50 [ 3349.524953][T21158] ? rtnl_stats_set+0x4d0/0x4d0 [ 3349.529851][T21158] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3349.535024][T21158] netlink_rcv_skb+0x165/0x440 [ 3349.539835][T21158] ? rtnl_stats_set+0x4d0/0x4d0 [ 3349.544738][T21158] ? netlink_ack+0x1360/0x1360 [ 3349.549564][T21158] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3349.554901][T21158] netlink_unicast+0x547/0x7f0 [ 3349.559714][T21158] ? netlink_attachskb+0x890/0x890 [ 3349.564873][T21158] ? __virt_addr_valid+0x61/0x2e0 [ 3349.570115][T21158] ? __phys_addr_symbol+0x30/0x70 [ 3349.575278][T21158] ? __check_object_size+0x333/0x6e0 [ 3349.580630][T21158] netlink_sendmsg+0x925/0xe30 [ 3349.585457][T21158] ? netlink_unicast+0x7f0/0x7f0 [ 3349.590448][T21158] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3349.595779][T21158] ? netlink_unicast+0x7f0/0x7f0 [ 3349.600756][T21158] sock_sendmsg+0xde/0x190 [ 3349.605220][T21158] ____sys_sendmsg+0x71c/0x900 [ 3349.610049][T21158] ? copy_msghdr_from_user+0xfc/0x150 [ 3349.615468][T21158] ? kernel_sendmsg+0x50/0x50 [ 3349.620191][T21158] ? futex_unqueue+0xb7/0x120 [ 3349.624912][T21158] ? futex_wait+0x503/0x680 [ 3349.629467][T21158] ___sys_sendmsg+0x110/0x1b0 [ 3349.634187][T21158] ? do_recvmmsg+0x6e0/0x6e0 [ 3349.638823][T21158] ? __fget_files+0x248/0x480 [ 3349.643555][T21158] ? lock_downgrade+0x690/0x690 [ 3349.648540][T21158] ? __fget_files+0x26a/0x480 [ 3349.653272][T21158] ? __fget_light+0xe5/0x270 [ 3349.658006][T21158] __sys_sendmsg+0xf7/0x1c0 [ 3349.662552][T21158] ? __sys_sendmsg_sock+0x40/0x40 [ 3349.667653][T21158] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3349.673611][T21158] ? syscall_enter_from_user_mode+0x26/0x80 [ 3349.679546][T21158] ? lockdep_hardirqs_on+0x7d/0x100 [ 3349.684785][T21158] do_syscall_64+0x39/0xb0 [ 3349.689271][T21158] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3349.695206][T21158] RIP: 0033:0x7faa0ba8c169 [ 3349.699650][T21158] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3349.719302][T21158] RSP: 002b:00007faa0c8d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3349.727758][T21158] RAX: ffffffffffffffda RBX: 00007faa0bbabf80 RCX: 00007faa0ba8c169 [ 3349.735759][T21158] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3349.743768][T21158] RBP: 00007faa0bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3349.751781][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3349.759873][T21158] R13: 00007ffd537ccaef R14: 00007faa0c8d1300 R15: 0000000000022000 [ 3349.767892][T21158] [ 3349.778852][T21152] ,task=syz-executor.0,pid=21152,uid=0 [ 3349.778877][T21158] Mem-Info: [ 3349.778891][T21158] active_anon:82454 inactive_anon:1077 isolated_anon:0 [ 3349.778891][T21158] active_file:14 inactive_file:15607 isolated_file:0 [ 3349.778891][T21158] unevictable:768 dirty:35 writeback:0 [ 3349.778891][T21158] slab_reclaimable:31001 slab_unreclaimable:953922 [ 3349.778891][T21158] mapped:19747 shmem:2088 pagetables:666 [ 3349.778891][T21158] sec_pagetables:0 bounce:0 [ 3349.778891][T21158] kernel_misc_reclaimable:0 [ 3349.778891][T21158] free:450288 free_pcp:16204 free_cma:0 [ 3349.784456][T21152] Memory cgroup out of memory: Killed process 21152 (syz-executor.0) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3349.788090][T21158] Node 0 active_anon:329460kB inactive_anon:3712kB active_file:8kB inactive_file:57540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 3349.837556][T21151] syz-executor.2 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3349.896675][T21158] Node 1 active_anon:400kB inactive_anon:584kB active_file:0kB inactive_file:4936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:88kB writeback:0kB shmem:1924kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:616kB pagetables:340kB sec_pagetables:0kB all_unreclaimable? no [ 3349.913502][T21151] CPU: 1 PID: 21151 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3349.940823][T21151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3349.948041][T21158] Node 0 [ 3349.951105][T21151] Call Trace: [ 3349.951119][T21151] [ 3349.951133][T21151] dump_stack_lvl+0x136/0x150 [ 3349.954155][T21158] DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:96kB free_cma:0kB [ 3349.957374][T21151] dump_header+0x10a/0xd70 [ 3349.957420][T21151] oom_kill_process+0x25d/0x600 [ 3349.957461][T21151] out_of_memory+0x35c/0x1660 [ 3349.957514][T21151] ? oom_killer_disable+0x2b0/0x2b0 [ 3349.957559][T21151] ? rcu_read_unlock+0x9/0x60 [ 3349.957600][T21151] ? find_held_lock+0x2d/0x110 [ 3349.957656][T21151] mem_cgroup_out_of_memory+0x206/0x270 [ 3349.957701][T21151] ? mem_cgroup_margin+0x130/0x130 [ 3349.957741][T21151] ? lock_downgrade+0x690/0x690 [ 3349.957795][T21151] try_charge_memcg+0xf9b/0x13b0 08:19:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xfffffffe) [ 3349.971347][T21158] lowmem_reserve[]: [ 3349.992373][T21151] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3349.992423][T21151] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3349.992471][T21151] ? lock_downgrade+0x690/0x690 [ 3349.992507][T21151] ? lock_downgrade+0x690/0x690 [ 3349.992555][T21151] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3349.992594][T21151] __alloc_pages+0x1f3/0x4a0 [ 3349.992630][T21151] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3349.992665][T21151] ? print_usage_bug.part.0+0x660/0x660 [ 3349.992709][T21151] ? find_held_lock+0x2d/0x110 [ 3349.992769][T21151] alloc_pages+0x1aa/0x270 [ 3349.992832][T21151] pte_alloc_one+0x1a/0x230 [ 3349.992883][T21151] __pte_alloc+0x6d/0x260 [ 3349.992917][T21151] ? pmd_install+0x160/0x160 [ 3349.992952][T21151] ? _raw_spin_unlock+0x28/0x40 [ 3349.992995][T21151] ? __pmd_alloc+0x30c/0x5d0 [ 3349.993036][T21151] __handle_mm_fault+0x3626/0x3e60 [ 3349.993082][T21151] ? vm_iomap_memory+0x190/0x190 [ 3349.993180][T21151] handle_mm_fault+0x2ba/0x9c0 [ 3349.993230][T21151] do_user_addr_fault+0x475/0x1230 [ 3349.993278][T21151] ? rcu_is_watching+0x12/0xb0 [ 3349.993327][T21151] exc_page_fault+0x98/0x170 [ 3349.993372][T21151] asm_exc_page_fault+0x26/0x30 [ 3349.993422][T21151] RIP: 0033:0x7f9ac622bde9 [ 3349.993450][T21151] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3349.993481][T21151] RSP: 002b:00007ffc61d0e9c0 EFLAGS: 00010246 [ 3349.993508][T21151] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3349.993528][T21151] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555565cf2e8 [ 3349.993547][T21151] RBP: 00007ffc61d0eab8 R08: 0000000000000000 R09: 0000000000000000 [ 3349.993567][T21151] R10: 00007f9ac5e00068 R11: 000000000008a108 R12: 000000000033116f [ 3349.993588][T21151] R13: 00007ffc61d0eae0 R14: 00007ffc61d0eb00 R15: 0000000000000032 [ 3349.993631][T21151] [ 3350.008872][T21151] memory: usage 307200kB, limit 307200kB, failcnt 71455 [ 3350.040872][T21158] 0 [ 3350.071437][T21151] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3350.124451][T21158] 2617 [ 3350.183338][T21151] Memory cgroup stats for [ 3350.200482][T21158] 2619 [ 3350.203070][T21151] /syz2 [ 3350.211078][T21158] 2619 [ 3350.226212][T21151] : [ 3350.227488][T21158] 2619 [ 3350.235216][T21151] anon 94208 [ 3350.235216][T21151] file 364544 [ 3350.235216][T21151] kernel 314097664 [ 3350.235216][T21151] kernel_stack 65536 [ 3350.235216][T21151] pagetables 73728 [ 3350.235216][T21151] sec_pagetables 0 [ 3350.235216][T21151] percpu 5428704 [ 3350.235216][T21151] sock 0 [ 3350.235216][T21151] vmalloc 0 [ 3350.235216][T21151] shmem 348160 [ 3350.235216][T21151] zswap 0 [ 3350.235216][T21151] zswapped 0 [ 3350.235216][T21151] file_mapped 311296 [ 3350.235216][T21151] file_dirty 16384 [ 3350.235216][T21151] file_writeback 0 [ 3350.235216][T21151] swapcached 0 [ 3350.235216][T21151] anon_thp 0 [ 3350.235216][T21151] file_thp 0 [ 3350.235216][T21151] shmem_thp 0 [ 3350.235216][T21151] inactive_anon 36864 [ 3350.235216][T21151] active_anon 405504 [ 3350.235216][T21151] inactive_file 12288 [ 3350.235216][T21151] active_file 4096 [ 3350.235216][T21151] unevictable 0 [ 3350.235216][T21151] slab_reclaimable 216224 [ 3350.235216][T21151] slab_unreclaimable 308285824 [ 3350.235216][T21151] slab 308502048 [ 3350.235216][T21151] workingset_refault_anon 0 [ 3350.235216][T21151] workingset_refault_file 0 [ 3350.235216][T21151] workingset_activate_anon 0 [ 3350.235216][T21151] workingset_activate_file 0 [ 3350.235216][T21151] workingset_restore_anon 0 [ 3350.235216][T21151] workingset_restore_file 0 [ 3350.235216][T21151] workingset_nodereclaim 0 [ 3350.235216][T21151] pgscan 54843 [ 3350.235216][T21151] pgsteal 463 [ 3350.235216][T21151] pgscan_kswapd 0 [ 3350.235216][T21151] pgscan_direct 54843 [ 3350.235216][T21151] pgscan_khugepaged 0 [ 3350.235216][T21151] pgsteal_kswapd 0 [ 3350.235216][T21151] pgsteal_direct 463 [ 3350.235216][T21151] pgsteal_khugepaged 0 [ 3350.235216][T21151] pgfault 421751 [ 3350.235216][T21151] pgmajfault 1 [ 3350.235216][T21151] pgrefill 183055 [ 3350.235216][T21151] pgactivate 54341 [ 3350.235216][T21151] pgdeactivate 0 [ 3350.235216][T21151] pglazyfree 0 [ 3350.235216][T21151] pglazyfreed 0 [ 3350.235216][T21151] zswpin 0 [ 3350.235216][T21151] zswpout 0 [ 3350.243685][T21158] [ 3350.252990][T21151] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3350.255104][T21158] Node 0 [ 3350.259335][T21151] ,cpuset= [ 3350.262615][T21158] DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:329420kB inactive_anon:3708kB active_file:8kB inactive_file:55964kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:38860kB local_pcp:18292kB free_cma:0kB [ 3350.265107][T21151] syz2 [ 3350.268468][T21158] lowmem_reserve[]: [ 3350.286320][T21151] ,mems_allowed=0-1 [ 3350.474890][T21158] 0 [ 3350.516736][T21151] ,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21151,uid=0 [ 3350.522985][T21158] 0 1 1 1 [ 3350.529530][T21151] Memory cgroup out of memory: Killed process 21151 (syz-executor.2) total-vm:54548kB, anon-rss:368kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3350.532030][T21158] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 3350.568997][T21157] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3350.592086][T21158] lowmem_reserve[]: 0 0 0 0 0 [ 3350.592159][T21158] Node 1 Normal free:1745756kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:384kB inactive_anon:644kB active_file:80kB inactive_file:4856kB unevictable:1536kB writepending:88kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:25796kB local_pcp:22608kB free_cma:0kB [ 3350.592256][T21158] lowmem_reserve[]: 0 0 0 0 0 [ 3350.592313][T21158] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3350.592589][T21158] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) 24*128kB (UME) 14*256kB (UME) 6*512kB (UM) 10*1024kB (UM) 6*2048kB (M) [ 3350.631487][T21157] CPU: 1 PID: 21157 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3350.659103][T21158] 0*4096kB [ 3350.665138][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3350.665169][T21157] Call Trace: [ 3350.665179][T21157] [ 3350.665192][T21157] dump_stack_lvl+0x136/0x150 [ 3350.665234][T21157] dump_header+0x10a/0xd70 [ 3350.677234][T21158] = 44180kB [ 3350.678942][T21157] oom_kill_process+0x25d/0x600 [ 3350.678992][T21157] out_of_memory+0x35c/0x1660 [ 3350.692184][T21158] Node 0 [ 3350.692366][T21157] ? oom_killer_disable+0x2b0/0x2b0 [ 3350.695515][T21158] Normal: [ 3350.699980][T21157] ? rcu_read_unlock+0x9/0x60 [ 3350.700023][T21157] ? find_held_lock+0x2d/0x110 [ 3350.700087][T21157] mem_cgroup_out_of_memory+0x206/0x270 [ 3350.700132][T21157] ? mem_cgroup_margin+0x130/0x130 [ 3350.700179][T21157] ? lock_downgrade+0x690/0x690 [ 3350.700230][T21157] try_charge_memcg+0xf9b/0x13b0 [ 3350.700270][T21157] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3350.700300][T21157] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3350.700359][T21157] ? lock_downgrade+0x690/0x690 [ 3350.708051][T21158] 1*4kB [ 3350.712753][T21157] ? lock_downgrade+0x690/0x690 [ 3350.712814][T21157] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3350.718438][T21158] (M) [ 3350.720453][T21157] memcg_charge_kernel_stack.part.0+0x6c/0x150 08:19:17 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x48000000) [ 3350.720507][T21157] copy_process+0x4e3/0x7590 [ 3350.725934][T21158] 0*8kB [ 3350.728769][T21157] ? __lock_acquire+0xbc5/0x5d40 [ 3350.728821][T21157] ? __cleanup_sighand+0xb0/0xb0 [ 3350.728862][T21157] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3350.728903][T21157] ? psi_memstall_leave+0x174/0x250 [ 3350.728947][T21157] ? lock_downgrade+0x690/0x690 [ 3350.738631][T21158] 1*16kB [ 3350.744066][T21157] kernel_clone+0xeb/0x890 [ 3350.744118][T21157] ? create_io_thread+0xf0/0xf0 [ 3350.751742][T21158] (M) [ 3350.754127][T21157] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3350.754184][T21157] ? lock_downgrade+0x690/0x690 [ 3350.760006][T21158] 0*32kB [ 3350.765139][T21157] __do_sys_clone+0xba/0x100 [ 3350.765187][T21157] ? kernel_clone+0x890/0x890 [ 3350.772078][T21158] 0*64kB [ 3350.776039][T21157] ? syscall_enter_from_user_mode+0x26/0x80 [ 3350.776100][T21157] do_syscall_64+0x39/0xb0 [ 3350.780060][T21158] 0*128kB [ 3350.783830][T21157] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3350.783883][T21157] RIP: 0033:0x7faa0ba8d591 [ 3350.783917][T21157] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3350.790692][T21158] 0*256kB [ 3350.792145][T21157] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3350.792181][T21157] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3350.792202][T21157] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3350.792223][T21157] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3350.792243][T21157] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3350.792263][T21157] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3350.792305][T21157] [ 3350.819488][T21157] memory: usage 307200kB, limit 307200kB, failcnt 94983 [ 3350.843244][T21158] 0*512kB [ 3350.905090][T21157] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3350.950875][T21158] 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3351.005570][T21157] Memory cgroup stats for /syz1: [ 3351.005837][T21157] anon 102400 [ 3351.005837][T21157] file 356352 [ 3351.005837][T21157] kernel 314093568 [ 3351.005837][T21157] kernel_stack 65536 [ 3351.005837][T21157] pagetables 81920 [ 3351.005837][T21157] sec_pagetables 0 [ 3351.005837][T21157] percpu 5423968 [ 3351.005837][T21157] sock 0 [ 3351.005837][T21157] vmalloc 16384 [ 3351.005837][T21157] shmem 339968 [ 3351.005837][T21157] zswap 0 [ 3351.005837][T21157] zswapped 0 [ 3351.005837][T21157] file_mapped 262144 [ 3351.005837][T21157] file_dirty 12288 [ 3351.005837][T21157] file_writeback 0 [ 3351.005837][T21157] swapcached 0 [ 3351.005837][T21157] anon_thp 0 [ 3351.005837][T21157] file_thp 0 [ 3351.005837][T21157] shmem_thp 0 [ 3351.005837][T21157] inactive_anon 40960 [ 3351.005837][T21157] active_anon 401408 [ 3351.005837][T21157] inactive_file 0 [ 3351.005837][T21157] active_file 16384 [ 3351.005837][T21157] unevictable 0 [ 3351.005837][T21157] slab_reclaimable 245608 [ 3351.005837][T21157] slab_unreclaimable 308226616 [ 3351.005837][T21157] slab 308472224 [ 3351.005837][T21157] workingset_refault_anon 0 [ 3351.005837][T21157] workingset_refault_file 4 [ 3351.005837][T21157] workingset_activate_anon 0 [ 3351.005837][T21157] workingset_activate_file 0 [ 3351.005837][T21157] workingset_restore_anon 0 [ 3351.005837][T21157] workingset_restore_file 2 [ 3351.005837][T21157] workingset_nodereclaim 0 [ 3351.005837][T21157] pgscan 79502 [ 3351.005837][T21157] pgsteal 601 [ 3351.005837][T21157] pgscan_kswapd 0 [ 3351.005837][T21157] pgscan_direct 79502 [ 3351.005837][T21157] pgscan_khugepaged 0 [ 3351.005837][T21157] pgsteal_kswapd 0 [ 3351.005837][T21157] pgsteal_direct 601 [ 3351.005837][T21157] pgsteal_khugepaged 0 [ 3351.005837][T21157] pgfault 410032 [ 3351.005837][T21157] pgmajfault 0 [ 3351.005837][T21157] pgrefill 216133 [ 3351.005837][T21157] pgactivate 78808 [ 3351.005837][T21157] pgdeactivate 0 [ 3351.005837][T21157] pglazyfree 0 [ 3351.005837][T21157] pglazyfreed 0 [ 3351.005837][T21157] zswpin 0 [ 3351.005837][T21157] zswpout 0 [ 3351.021986][T21158] Node 1 Normal: 1*4kB (E) 165*8kB (M) 265*16kB (UME) 89*32kB (UME) 106*64kB (UME) 112*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1745756kB [ 3351.221885][T21157] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1 [ 3351.227666][T21158] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3351.230849][T21157] ,task_memcg= [ 3351.239365][T21158] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3351.261131][T21157] /syz1,task=syz-executor.1,pid=21157,uid=0 [ 3351.262331][T21158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3351.275280][T21157] Memory cgroup out of memory: Killed process 21157 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3351.277915][T21158] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3351.317435][T21155] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3351.346054][T21155] CPU: 0 PID: 21155 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3351.356566][T21155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3351.359666][T21158] 17668 total pagecache pages [ 3351.366652][T21155] Call Trace: [ 3351.366665][T21155] [ 3351.366679][T21155] dump_stack_lvl+0x136/0x150 [ 3351.366720][T21155] dump_header+0x10a/0xd70 [ 3351.366765][T21155] oom_kill_process+0x25d/0x600 [ 3351.366805][T21155] out_of_memory+0x35c/0x1660 [ 3351.366854][T21155] ? oom_killer_disable+0x2b0/0x2b0 [ 3351.376765][T21158] 0 pages in swap cache [ 3351.377918][T21155] ? rcu_read_unlock+0x9/0x60 [ 3351.377966][T21155] ? find_held_lock+0x2d/0x110 [ 3351.382771][T21158] Free swap = 0kB [ 3351.387058][T21155] mem_cgroup_out_of_memory+0x206/0x270 [ 3351.387111][T21155] ? mem_cgroup_margin+0x130/0x130 [ 3351.387154][T21155] ? lock_downgrade+0x690/0x690 [ 3351.387205][T21155] try_charge_memcg+0xf9b/0x13b0 [ 3351.387249][T21155] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3351.387282][T21155] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3351.387329][T21155] ? lock_downgrade+0x690/0x690 [ 3351.387367][T21155] ? lock_downgrade+0x690/0x690 [ 3351.387416][T21155] __memcg_kmem_charge_page+0x16e/0x3c0 08:19:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x24, 0x10, 0x407, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x1) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80002008}) [ 3351.387454][T21155] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3351.387499][T21155] copy_process+0x4e3/0x7590 [ 3351.387541][T21155] ? __lock_acquire+0xbc5/0x5d40 [ 3351.387586][T21155] ? __cleanup_sighand+0xb0/0xb0 [ 3351.387623][T21155] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3351.387660][T21155] ? psi_memstall_leave+0x174/0x250 [ 3351.387703][T21155] ? lock_downgrade+0x690/0x690 [ 3351.387750][T21155] kernel_clone+0xeb/0x890 [ 3351.387790][T21155] ? create_io_thread+0xf0/0xf0 [ 3351.387832][T21155] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3351.410029][T21158] Total swap = 0kB [ 3351.411411][T21155] ? lock_downgrade+0x690/0x690 [ 3351.411470][T21155] __do_sys_clone+0xba/0x100 [ 3351.418040][T21158] 2097051 pages RAM [ 3351.419953][T21155] ? kernel_clone+0x890/0x890 [ 3351.420018][T21155] ? syscall_enter_from_user_mode+0x26/0x80 [ 3351.426954][T21158] 0 pages HighMem/MovableOnly [ 3351.430673][T21155] do_syscall_64+0x39/0xb0 [ 3351.448323][T21158] 392115 pages reserved [ 3351.452249][T21155] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3351.452298][T21155] RIP: 0033:0x7f461ea8d591 [ 3351.460674][T21158] 0 pages cma reserved [ 3351.461990][T21155] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3351.462024][T21155] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3351.604213][T21155] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3351.612257][T21155] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3351.620285][T21155] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3351.628312][T21155] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3351.636338][T21155] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3351.644395][T21155] [ 3351.653725][T21155] memory: usage 307200kB, limit 307200kB, failcnt 82309 [ 3351.661198][T21155] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3351.668512][T21155] Memory cgroup stats for /syz3: [ 3351.668789][T21155] anon 86016 [ 3351.668789][T21155] file 368640 [ 3351.668789][T21155] kernel 314118144 [ 3351.668789][T21155] kernel_stack 32768 [ 3351.668789][T21155] pagetables 69632 [ 3351.668789][T21155] sec_pagetables 0 [ 3351.668789][T21155] percpu 5432256 [ 3351.668789][T21155] sock 0 [ 3351.668789][T21155] vmalloc 8192 [ 3351.668789][T21155] shmem 339968 [ 3351.668789][T21155] zswap 0 [ 3351.668789][T21155] zswapped 0 [ 3351.668789][T21155] file_mapped 327680 [ 3351.668789][T21155] file_dirty 28672 [ 3351.668789][T21155] file_writeback 0 [ 3351.668789][T21155] swapcached 0 [ 3351.668789][T21155] anon_thp 0 [ 3351.668789][T21155] file_thp 0 [ 3351.668789][T21155] shmem_thp 0 [ 3351.668789][T21155] inactive_anon 401408 [ 3351.668789][T21155] active_anon 24576 [ 3351.668789][T21155] inactive_file 0 [ 3351.668789][T21155] active_file 28672 [ 3351.668789][T21155] unevictable 0 [ 3351.668789][T21155] slab_reclaimable 37424 [ 3351.668789][T21155] slab_unreclaimable 308482240 [ 3351.668789][T21155] slab 308519664 08:19:18 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xda4b0300) [ 3351.668789][T21155] workingset_refault_anon 0 [ 3351.668789][T21155] workingset_refault_file 2 [ 3351.668789][T21155] workingset_activate_anon 0 [ 3351.668789][T21155] workingset_activate_file 0 [ 3351.668789][T21155] workingset_restore_anon 0 [ 3351.668789][T21155] workingset_restore_file 0 [ 3351.668789][T21155] workingset_nodereclaim 0 [ 3351.668789][T21155] pgscan 56183 [ 3351.668789][T21155] pgsteal 455 [ 3351.668789][T21155] pgscan_kswapd 0 [ 3351.668789][T21155] pgscan_direct 56183 [ 3351.668789][T21155] pgscan_khugepaged 0 [ 3351.668789][T21155] pgsteal_kswapd 0 [ 3351.668789][T21155] pgsteal_direct 455 [ 3351.668789][T21155] pgsteal_khugepaged 0 [ 3351.668789][T21155] pgfault 416136 [ 3351.668789][T21155] pgmajfault 1 [ 3351.668789][T21155] pgrefill 212316 [ 3351.668789][T21155] pgactivate 55719 [ 3351.668789][T21155] pgdeactivate 0 [ 3351.668789][T21155] pglazyfree 0 [ 3351.668789][T21155] pglazyfreed 0 [ 3351.668789][T21155] zswpin 0 [ 3351.668789][T21155] zswpout 0 [ 3351.865807][T21155] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21155,uid=0 [ 3351.890096][T21155] Memory cgroup out of memory: Killed process 21155 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:18 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd453030000000000) [ 3351.989873][T21161] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3352.011482][T21161] CPU: 0 PID: 21161 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3352.021996][T21161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3352.032104][T21161] Call Trace: [ 3352.035426][T21161] [ 3352.038403][T21161] dump_stack_lvl+0x136/0x150 [ 3352.043157][T21161] dump_header+0x10a/0xd70 [ 3352.047649][T21161] oom_kill_process+0x25d/0x600 [ 3352.052664][T21161] out_of_memory+0x35c/0x1660 [ 3352.057429][T21161] ? find_held_lock+0x2d/0x110 [ 3352.062275][T21161] ? oom_killer_disable+0x2b0/0x2b0 [ 3352.067549][T21161] ? rcu_read_unlock+0x9/0x60 [ 3352.072336][T21161] ? find_held_lock+0x2d/0x110 [ 3352.077197][T21161] mem_cgroup_out_of_memory+0x206/0x270 [ 3352.082911][T21161] ? mem_cgroup_margin+0x130/0x130 [ 3352.088097][T21161] ? lock_downgrade+0x690/0x690 [ 3352.093028][T21161] try_charge_memcg+0xf9b/0x13b0 [ 3352.098037][T21161] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3352.104096][T21161] ? rcu_read_unlock+0x9/0x60 [ 3352.108866][T21161] ? lock_downgrade+0x690/0x690 [ 3352.113805][T21161] charge_memcg+0x90/0x3b0 [ 3352.118289][T21161] __mem_cgroup_charge+0x2b/0x90 [ 3352.123288][T21161] ? copy_mc_to_kernel+0x3e/0x90 [ 3352.128300][T21161] do_wp_page+0x8eb/0x3520 [ 3352.132758][T21161] ? lock_release+0x670/0x670 [ 3352.137468][T21161] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3352.142902][T21161] ? do_raw_spin_lock+0x124/0x2b0 [ 3352.147968][T21161] ? spin_bug+0x1c0/0x1c0 [ 3352.152325][T21161] ? lock_downgrade+0x690/0x690 [ 3352.157211][T21161] __handle_mm_fault+0x19a1/0x3e60 [ 3352.162364][T21161] ? vm_iomap_memory+0x190/0x190 [ 3352.167354][T21161] handle_mm_fault+0x2ba/0x9c0 [ 3352.172178][T21161] do_user_addr_fault+0x475/0x1230 [ 3352.177686][T21161] ? rcu_is_watching+0x12/0xb0 [ 3352.182658][T21161] exc_page_fault+0x98/0x170 [ 3352.187282][T21161] asm_exc_page_fault+0x26/0x30 [ 3352.192195][T21161] RIP: 0033:0x7f9ac62366e5 [ 3352.196641][T21161] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3352.216545][T21161] RSP: 002b:00007ffc61d0e9d0 EFLAGS: 00010206 [ 3352.222646][T21161] RAX: 0000000000000003 RBX: 00007f9ac63abf80 RCX: 00007f9ac63a80c0 [ 3352.230649][T21161] RDX: 00007f9ac63a80c0 RSI: 0000000000000080 RDI: 00007f9ac63abf80 [ 3352.238647][T21161] RBP: 00007f9ac63abf80 R08: 00007ffc61d6c080 R09: 0000000000000000 [ 3352.246656][T21161] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 0000000000331e86 [ 3352.254645][T21161] R13: 00007ffc61d0eae0 R14: 00007f9ac63abf80 R15: 0000000000000032 [ 3352.262657][T21161] [ 3352.278352][T21161] memory: usage 307200kB, limit 307200kB, failcnt 71559 [ 3352.285596][T21161] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3352.292852][T21161] Memory cgroup stats for /syz2: [ 3352.293126][T21161] anon 94208 [ 3352.293126][T21161] file 364544 [ 3352.293126][T21161] kernel 314114048 [ 3352.293126][T21161] kernel_stack 65536 [ 3352.293126][T21161] pagetables 69632 [ 3352.293126][T21161] sec_pagetables 0 [ 3352.293126][T21161] percpu 5428768 [ 3352.293126][T21161] sock 0 [ 3352.293126][T21161] vmalloc 0 [ 3352.293126][T21161] shmem 348160 [ 3352.293126][T21161] zswap 0 [ 3352.293126][T21161] zswapped 0 [ 3352.293126][T21161] file_mapped 311296 [ 3352.293126][T21161] file_dirty 16384 [ 3352.293126][T21161] file_writeback 0 [ 3352.293126][T21161] swapcached 0 [ 3352.293126][T21161] anon_thp 0 [ 3352.293126][T21161] file_thp 0 [ 3352.293126][T21161] shmem_thp 0 [ 3352.293126][T21161] inactive_anon 393216 [ 3352.293126][T21161] active_anon 49152 [ 3352.293126][T21161] inactive_file 12288 [ 3352.293126][T21161] active_file 4096 [ 3352.293126][T21161] unevictable 0 [ 3352.293126][T21161] slab_reclaimable 218152 [ 3352.293126][T21161] slab_unreclaimable 308298080 [ 3352.293126][T21161] slab 308516232 [ 3352.293126][T21161] workingset_refault_anon 0 [ 3352.293126][T21161] workingset_refault_file 0 [ 3352.293126][T21161] workingset_activate_anon 0 [ 3352.293126][T21161] workingset_activate_file 0 [ 3352.293126][T21161] workingset_restore_anon 0 [ 3352.293126][T21161] workingset_restore_file 0 [ 3352.293126][T21161] workingset_nodereclaim 0 [ 3352.293126][T21161] pgscan 54843 [ 3352.293126][T21161] pgsteal 463 [ 3352.293126][T21161] pgscan_kswapd 0 [ 3352.293126][T21161] pgscan_direct 54843 [ 3352.293126][T21161] pgscan_khugepaged 0 [ 3352.293126][T21161] pgsteal_kswapd 0 [ 3352.293126][T21161] pgsteal_direct 463 [ 3352.293126][T21161] pgsteal_khugepaged 0 [ 3352.293126][T21161] pgfault 421793 [ 3352.293126][T21161] pgmajfault 1 [ 3352.293126][T21161] pgrefill 183323 [ 3352.293126][T21161] pgactivate 54341 [ 3352.293126][T21161] pgdeactivate 0 [ 3352.293126][T21161] pglazyfree 0 [ 3352.293126][T21161] pglazyfreed 0 [ 3352.293126][T21161] zswpin 0 [ 3352.293126][T21161] zswpout 0 08:19:18 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x48510300) [ 3352.482813][T21161] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21161,uid=0 [ 3352.499480][T21161] Memory cgroup out of memory: Killed process 21161 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3352.521549][T21165] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3352.532684][T21165] CPU: 1 PID: 21165 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3352.543170][T21165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3352.553314][T21165] Call Trace: [ 3352.556636][T21165] [ 3352.559610][T21165] dump_stack_lvl+0x136/0x150 [ 3352.564355][T21165] dump_header+0x10a/0xd70 [ 3352.568847][T21165] oom_kill_process+0x25d/0x600 [ 3352.573766][T21165] out_of_memory+0x35c/0x1660 [ 3352.578533][T21165] ? oom_killer_disable+0x2b0/0x2b0 [ 3352.583793][T21165] ? rcu_read_unlock+0x9/0x60 [ 3352.588546][T21165] ? find_held_lock+0x2d/0x110 [ 3352.593399][T21165] mem_cgroup_out_of_memory+0x206/0x270 [ 3352.599014][T21165] ? mem_cgroup_margin+0x130/0x130 [ 3352.604249][T21165] ? lock_downgrade+0x690/0x690 [ 3352.609177][T21165] try_charge_memcg+0xf9b/0x13b0 [ 3352.614191][T21165] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3352.620251][T21165] ? rcu_read_unlock+0x9/0x60 [ 3352.624995][T21165] ? lock_downgrade+0x690/0x690 [ 3352.629927][T21165] charge_memcg+0x90/0x3b0 [ 3352.634408][T21165] __mem_cgroup_charge+0x2b/0x90 [ 3352.639425][T21165] do_wp_page+0x8eb/0x3520 [ 3352.644000][T21165] ? lock_release+0x670/0x670 [ 3352.648756][T21165] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3352.654201][T21165] ? do_raw_spin_lock+0x124/0x2b0 [ 3352.659293][T21165] ? spin_bug+0x1c0/0x1c0 [ 3352.663674][T21165] ? lock_downgrade+0x690/0x690 [ 3352.668579][T21165] __handle_mm_fault+0x19a1/0x3e60 [ 3352.673849][T21165] ? vm_iomap_memory+0x190/0x190 [ 3352.678862][T21165] handle_mm_fault+0x2ba/0x9c0 [ 3352.683697][T21165] do_user_addr_fault+0x475/0x1230 [ 3352.688859][T21165] ? rcu_is_watching+0x12/0xb0 [ 3352.693696][T21165] exc_page_fault+0x98/0x170 [ 3352.698336][T21165] asm_exc_page_fault+0x26/0x30 [ 3352.703239][T21165] RIP: 0033:0x7f0e44a39610 [ 3352.707678][T21165] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3352.727347][T21165] RSP: 002b:00007ffc44a97870 EFLAGS: 00010246 [ 3352.733490][T21165] RAX: 000000004750851b RBX: 00007f0e44bac018 RCX: 0000001b2ce20000 [ 3352.741502][T21165] RDX: 0000000000000000 RSI: 0000001b2ce20018 RDI: 0000000000000022 [ 3352.749522][T21165] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3352.757541][T21165] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 00007f0e44ba0000 [ 3352.765580][T21165] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3352.773598][T21165] ? __x64_sys_socket+0x11/0xb0 [ 3352.778582][T21165] [ 3352.790857][T21165] memory: usage 307200kB, limit 307200kB, failcnt 74558 [ 3352.800897][T21165] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3352.809643][T21165] Memory cgroup stats for /syz5: [ 3352.809919][T21165] anon 98304 [ 3352.809919][T21165] file 360448 [ 3352.809919][T21165] kernel 314114048 [ 3352.809919][T21165] kernel_stack 65536 [ 3352.809919][T21165] pagetables 73728 [ 3352.809919][T21165] sec_pagetables 0 [ 3352.809919][T21165] percpu 5432688 [ 3352.809919][T21165] sock 0 [ 3352.809919][T21165] vmalloc 20480 [ 3352.809919][T21165] shmem 344064 [ 3352.809919][T21165] zswap 0 [ 3352.809919][T21165] zswapped 0 [ 3352.809919][T21165] file_mapped 327680 [ 3352.809919][T21165] file_dirty 12288 [ 3352.809919][T21165] file_writeback 0 [ 3352.809919][T21165] swapcached 0 [ 3352.809919][T21165] anon_thp 0 [ 3352.809919][T21165] file_thp 0 [ 3352.809919][T21165] shmem_thp 0 [ 3352.809919][T21165] inactive_anon 36864 [ 3352.809919][T21165] active_anon 405504 [ 3352.809919][T21165] inactive_file 0 [ 3352.809919][T21165] active_file 16384 [ 3352.809919][T21165] unevictable 0 [ 3352.809919][T21165] slab_reclaimable 14880 [ 3352.809919][T21165] slab_unreclaimable 308476352 [ 3352.809919][T21165] slab 308491232 [ 3352.809919][T21165] workingset_refault_anon 0 [ 3352.809919][T21165] workingset_refault_file 1 [ 3352.809919][T21165] workingset_activate_anon 0 [ 3352.809919][T21165] workingset_activate_file 0 [ 3352.809919][T21165] workingset_restore_anon 0 [ 3352.809919][T21165] workingset_restore_file 0 [ 3352.809919][T21165] workingset_nodereclaim 0 [ 3352.809919][T21165] pgscan 43213 [ 3352.809919][T21165] pgsteal 455 [ 3352.809919][T21165] pgscan_kswapd 0 [ 3352.809919][T21165] pgscan_direct 43213 [ 3352.809919][T21165] pgscan_khugepaged 0 [ 3352.809919][T21165] pgsteal_kswapd 0 [ 3352.809919][T21165] pgsteal_direct 455 [ 3352.809919][T21165] pgsteal_khugepaged 0 [ 3352.809919][T21165] pgfault 412139 [ 3352.809919][T21165] pgmajfault 0 [ 3352.809919][T21165] pgrefill 143268 [ 3352.809919][T21165] pgactivate 42743 [ 3352.809919][T21165] pgdeactivate 0 [ 3352.809919][T21165] pglazyfree 0 [ 3352.809919][T21165] pglazyfreed 0 [ 3352.809919][T21165] zswpin 0 08:19:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x6c}}, 0x801) [ 3352.809919][T21165] zswpout 0 [ 3353.000446][T21165] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21165,uid=0 [ 3353.017203][T21165] Memory cgroup out of memory: Killed process 21165 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3353.038470][T21159] syz-executor.0 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3353.063480][T21159] CPU: 1 PID: 21159 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3353.073984][T21159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3353.084094][T21159] Call Trace: [ 3353.087398][T21159] [ 3353.090352][T21159] dump_stack_lvl+0x136/0x150 [ 3353.095077][T21159] dump_header+0x10a/0xd70 [ 3353.099537][T21159] oom_kill_process+0x25d/0x600 [ 3353.104432][T21159] out_of_memory+0x35c/0x1660 [ 3353.109166][T21159] ? oom_killer_disable+0x2b0/0x2b0 [ 3353.114432][T21159] ? rcu_read_unlock+0x9/0x60 [ 3353.119146][T21159] ? find_held_lock+0x2d/0x110 [ 3353.123965][T21159] mem_cgroup_out_of_memory+0x206/0x270 [ 3353.129738][T21159] ? mem_cgroup_margin+0x130/0x130 [ 3353.134901][T21159] ? lock_downgrade+0x690/0x690 [ 3353.139827][T21159] try_charge_memcg+0xf9b/0x13b0 [ 3353.144806][T21159] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3353.150833][T21159] ? rcu_read_unlock+0x9/0x60 [ 3353.155555][T21159] ? lock_downgrade+0x690/0x690 [ 3353.160468][T21159] charge_memcg+0x90/0x3b0 [ 3353.165126][T21159] __mem_cgroup_charge+0x2b/0x90 [ 3353.170152][T21159] __handle_mm_fault+0x1895/0x3e60 [ 3353.175354][T21159] ? vm_iomap_memory+0x190/0x190 [ 3353.180368][T21159] handle_mm_fault+0x2ba/0x9c0 [ 3353.185179][T21159] do_user_addr_fault+0x475/0x1230 [ 3353.190338][T21159] ? rcu_is_watching+0x12/0xb0 [ 3353.195244][T21159] exc_page_fault+0x98/0x170 [ 3353.199885][T21159] asm_exc_page_fault+0x26/0x30 [ 3353.204782][T21159] RIP: 0033:0x7fb9a042bde9 [ 3353.209224][T21159] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3353.228884][T21159] RSP: 002b:00007ffd5d45d010 EFLAGS: 00010246 [ 3353.234985][T21159] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3353.242986][T21159] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00005555567662e8 [ 3353.250985][T21159] RBP: 00007ffd5d45d108 R08: 0000000000000000 R09: 0000000000000000 [ 3353.258985][T21159] R10: 00007fb9a0000068 R11: 0000000000000246 R12: 0000000000331c11 [ 3353.266998][T21159] R13: 00007ffd5d45d130 R14: 00007fb9a05abf80 R15: 0000000000000032 [ 3353.275047][T21159] [ 3353.282733][T21159] memory: usage 307200kB, limit 307200kB, failcnt 81123 [ 3353.290142][T21159] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3353.297412][T21159] Memory cgroup stats for /syz0: [ 3353.297681][T21159] anon 131072 [ 3353.297681][T21159] file 364544 [ 3353.297681][T21159] kernel 314077184 [ 3353.297681][T21159] kernel_stack 65536 [ 3353.297681][T21159] pagetables 81920 [ 3353.297681][T21159] sec_pagetables 0 [ 3353.297681][T21159] percpu 5432256 [ 3353.297681][T21159] sock 0 [ 3353.297681][T21159] vmalloc 0 [ 3353.297681][T21159] shmem 344064 [ 3353.297681][T21159] zswap 0 [ 3353.297681][T21159] zswapped 0 [ 3353.297681][T21159] file_mapped 327680 [ 3353.297681][T21159] file_dirty 16384 [ 3353.297681][T21159] file_writeback 0 [ 3353.297681][T21159] swapcached 0 [ 3353.297681][T21159] anon_thp 0 [ 3353.297681][T21159] file_thp 0 [ 3353.297681][T21159] shmem_thp 0 [ 3353.297681][T21159] inactive_anon 61440 [ 3353.297681][T21159] active_anon 413696 [ 3353.297681][T21159] inactive_file 0 [ 3353.297681][T21159] active_file 20480 [ 3353.297681][T21159] unevictable 0 [ 3353.297681][T21159] slab_reclaimable 19208 [ 3353.297681][T21159] slab_unreclaimable 308446976 [ 3353.297681][T21159] slab 308466184 08:19:19 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdb4b0300) [ 3353.297681][T21159] workingset_refault_anon 0 [ 3353.297681][T21159] workingset_refault_file 4 [ 3353.297681][T21159] workingset_activate_anon 0 [ 3353.297681][T21159] workingset_activate_file 0 [ 3353.297681][T21159] workingset_restore_anon 0 [ 3353.297681][T21159] workingset_restore_file 1 [ 3353.297681][T21159] workingset_nodereclaim 0 [ 3353.297681][T21159] pgscan 62937 [ 3353.297681][T21159] pgsteal 571 [ 3353.297681][T21159] pgscan_kswapd 0 [ 3353.297681][T21159] pgscan_direct 62937 [ 3353.297681][T21159] pgscan_khugepaged 0 [ 3353.297681][T21159] pgsteal_kswapd 0 [ 3353.297681][T21159] pgsteal_direct 571 [ 3353.297681][T21159] pgsteal_khugepaged 0 [ 3353.297681][T21159] pgfault 437529 [ 3353.297681][T21159] pgmajfault 2 [ 3353.297681][T21159] pgrefill 201355 [ 3353.297681][T21159] pgactivate 62269 [ 3353.297681][T21159] pgdeactivate 0 [ 3353.297681][T21159] pglazyfree 0 [ 3353.297681][T21159] pglazyfreed 0 [ 3353.297681][T21159] zswpin 0 [ 3353.297681][T21159] zswpout 0 [ 3353.519845][T21159] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz-executor.0,pid=21159,uid=0 [ 3353.548727][T21159] Memory cgroup out of memory: Killed process 21159 (syz-executor.0) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:19:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x8000000000) 08:19:20 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x24, 0x10, 0x407, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x1) (async) r1 = epoll_create1(0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80002008}) [ 3353.599772][T21171] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3353.663654][T21171] CPU: 0 PID: 21171 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3353.674241][T21171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3353.684360][T21171] Call Trace: [ 3353.687699][T21171] [ 3353.690676][T21171] dump_stack_lvl+0x136/0x150 [ 3353.695419][T21171] dump_header+0x10a/0xd70 [ 3353.699915][T21171] oom_kill_process+0x25d/0x600 [ 3353.704838][T21171] out_of_memory+0x35c/0x1660 [ 3353.709599][T21171] ? oom_killer_disable+0x2b0/0x2b0 [ 3353.714865][T21171] ? rcu_read_unlock+0x9/0x60 [ 3353.719608][T21171] ? find_held_lock+0x2d/0x110 [ 3353.724459][T21171] mem_cgroup_out_of_memory+0x206/0x270 [ 3353.730185][T21171] ? mem_cgroup_margin+0x130/0x130 [ 3353.735373][T21171] ? lock_downgrade+0x690/0x690 [ 3353.740316][T21171] try_charge_memcg+0xf9b/0x13b0 [ 3353.745327][T21171] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3353.751381][T21171] ? rcu_read_unlock+0x9/0x60 [ 3353.756178][T21171] ? lock_downgrade+0x690/0x690 [ 3353.761119][T21171] charge_memcg+0x90/0x3b0 [ 3353.765601][T21171] __mem_cgroup_charge+0x2b/0x90 [ 3353.770638][T21171] ? copy_mc_to_kernel+0x3e/0x90 [ 3353.775663][T21171] do_wp_page+0x8eb/0x3520 [ 3353.780174][T21171] ? lock_release+0x670/0x670 [ 3353.784924][T21171] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3353.790388][T21171] ? do_raw_spin_lock+0x124/0x2b0 [ 3353.795487][T21171] ? spin_bug+0x1c0/0x1c0 [ 3353.799936][T21171] ? lock_downgrade+0x690/0x690 [ 3353.804951][T21171] __handle_mm_fault+0x19a1/0x3e60 [ 3353.810148][T21171] ? vm_iomap_memory+0x190/0x190 [ 3353.815202][T21171] handle_mm_fault+0x2ba/0x9c0 [ 3353.820045][T21171] do_user_addr_fault+0x475/0x1230 [ 3353.825235][T21171] ? rcu_is_watching+0x12/0xb0 [ 3353.830161][T21171] exc_page_fault+0x98/0x170 [ 3353.834818][T21171] asm_exc_page_fault+0x26/0x30 [ 3353.839734][T21171] RIP: 0033:0x7f0e44a36fdd [ 3353.844206][T21171] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 08:19:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd553030000000000) [ 3353.863905][T21171] RSP: 002b:00007ffc44a97950 EFLAGS: 00010217 [ 3353.870034][T21171] RAX: 0000000000000000 RBX: 00007f0e44babf8c RCX: 00007f0e44a8c169 [ 3353.878064][T21171] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e44babf88 [ 3353.886191][T21171] RBP: 00007f0e44babf80 R08: 00007f0e458bd700 R09: 0000000000000000 [ 3353.894215][T21171] R10: 00007f0e458bd700 R11: 0000000000000246 R12: 00007f0e44babf8c [ 3353.902240][T21171] R13: 00007f0e44600060 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3353.910295][T21171] [ 3353.922241][T21171] memory: usage 307200kB, limit 307200kB, failcnt 74673 [ 3353.931339][T21171] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3353.949005][T21171] Memory cgroup stats for /syz5: [ 3353.949264][T21171] anon 90112 [ 3353.949264][T21171] file 356352 [ 3353.949264][T21171] kernel 314126336 [ 3353.949264][T21171] kernel_stack 65536 [ 3353.949264][T21171] pagetables 73728 [ 3353.949264][T21171] sec_pagetables 0 [ 3353.949264][T21171] percpu 5432752 [ 3353.949264][T21171] sock 0 [ 3353.949264][T21171] vmalloc 20480 [ 3353.949264][T21171] shmem 344064 [ 3353.949264][T21171] zswap 0 [ 3353.949264][T21171] zswapped 0 [ 3353.949264][T21171] file_mapped 327680 [ 3353.949264][T21171] file_dirty 12288 [ 3353.949264][T21171] file_writeback 0 [ 3353.949264][T21171] swapcached 0 [ 3353.949264][T21171] anon_thp 0 [ 3353.949264][T21171] file_thp 0 [ 3353.949264][T21171] shmem_thp 0 [ 3353.949264][T21171] inactive_anon 40960 [ 3353.949264][T21171] active_anon 393216 [ 3353.949264][T21171] inactive_file 12288 [ 3353.949264][T21171] active_file 0 [ 3353.949264][T21171] unevictable 0 [ 3353.949264][T21171] slab_reclaimable 12712 [ 3353.949264][T21171] slab_unreclaimable 308487616 [ 3353.949264][T21171] slab 308500328 [ 3353.949264][T21171] workingset_refault_anon 0 [ 3353.949264][T21171] workingset_refault_file 1 [ 3353.949264][T21171] workingset_activate_anon 0 [ 3353.949264][T21171] workingset_activate_file 0 [ 3353.949264][T21171] workingset_restore_anon 0 [ 3353.949264][T21171] workingset_restore_file 0 [ 3353.949264][T21171] workingset_nodereclaim 0 [ 3353.949264][T21171] pgscan 43215 [ 3353.949264][T21171] pgsteal 456 [ 3353.949264][T21171] pgscan_kswapd 0 [ 3353.949264][T21171] pgscan_direct 43215 [ 3353.949264][T21171] pgscan_khugepaged 0 [ 3353.949264][T21171] pgsteal_kswapd 0 [ 3353.949264][T21171] pgsteal_direct 456 [ 3353.949264][T21171] pgsteal_khugepaged 0 [ 3353.949264][T21171] pgfault 412180 [ 3353.949264][T21171] pgmajfault 0 [ 3353.949264][T21171] pgrefill 143517 [ 3353.949264][T21171] pgactivate 42744 [ 3353.949264][T21171] pgdeactivate 0 [ 3353.949264][T21171] pglazyfree 0 [ 3353.949264][T21171] pglazyfreed 0 [ 3353.949264][T21171] zswpin 0 [ 3353.949264][T21171] zswpout 0 [ 3354.144633][T21171] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21171,uid=0 08:19:20 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdc030000) [ 3354.161012][T21171] Memory cgroup out of memory: Killed process 21171 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3354.187955][T21172] socket: no more sockets [ 3354.196889][T21169] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3354.216053][T21169] CPU: 1 PID: 21169 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3354.226550][T21169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3354.236668][T21169] Call Trace: [ 3354.240000][T21169] [ 3354.242982][T21169] dump_stack_lvl+0x136/0x150 [ 3354.247737][T21169] dump_header+0x10a/0xd70 [ 3354.252246][T21169] oom_kill_process+0x25d/0x600 [ 3354.257174][T21169] out_of_memory+0x35c/0x1660 [ 3354.261933][T21169] ? oom_killer_disable+0x2b0/0x2b0 [ 3354.267210][T21169] ? rcu_read_unlock+0x9/0x60 [ 3354.271962][T21169] ? find_held_lock+0x2d/0x110 [ 3354.276811][T21169] mem_cgroup_out_of_memory+0x206/0x270 [ 3354.282411][T21169] ? mem_cgroup_margin+0x130/0x130 [ 3354.287581][T21169] ? lock_downgrade+0x690/0x690 [ 3354.292488][T21169] try_charge_memcg+0xf9b/0x13b0 [ 3354.297549][T21169] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3354.303572][T21169] ? rcu_read_unlock+0x9/0x60 [ 3354.308314][T21169] ? lock_downgrade+0x690/0x690 [ 3354.313300][T21169] charge_memcg+0x90/0x3b0 [ 3354.317750][T21169] __mem_cgroup_charge+0x2b/0x90 [ 3354.322719][T21169] ? copy_mc_to_kernel+0x3e/0x90 [ 3354.327704][T21169] do_wp_page+0x8eb/0x3520 [ 3354.332159][T21169] ? lock_release+0x670/0x670 [ 3354.336868][T21169] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3354.342375][T21169] ? do_raw_spin_lock+0x124/0x2b0 [ 3354.347435][T21169] ? spin_bug+0x1c0/0x1c0 [ 3354.351798][T21169] ? lock_downgrade+0x690/0x690 [ 3354.356697][T21169] __handle_mm_fault+0x19a1/0x3e60 [ 3354.361856][T21169] ? vm_iomap_memory+0x190/0x190 [ 3354.366857][T21169] handle_mm_fault+0x2ba/0x9c0 [ 3354.371663][T21169] do_user_addr_fault+0x475/0x1230 [ 3354.376820][T21169] ? rcu_is_watching+0x12/0xb0 [ 3354.381629][T21169] exc_page_fault+0x98/0x170 [ 3354.386291][T21169] asm_exc_page_fault+0x26/0x30 [ 3354.391274][T21169] RIP: 0033:0x7f9ac62366e5 [ 3354.395734][T21169] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3354.415462][T21169] RSP: 002b:00007ffc61d0e9d0 EFLAGS: 00010206 [ 3354.421598][T21169] RAX: 0000000000000003 RBX: 00007f9ac63abf80 RCX: 00007f9ac63a80c0 [ 3354.429710][T21169] RDX: 00007f9ac63a80c0 RSI: 0000000000000080 RDI: 00007f9ac63abf80 [ 3354.437710][T21169] RBP: 00007f9ac63abf80 R08: 00007ffc61d6c080 R09: 0000000000000000 [ 3354.445706][T21169] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 000000000033251a [ 3354.453702][T21169] R13: 00007ffc61d0eae0 R14: 00007f9ac63abf80 R15: 0000000000000032 [ 3354.461725][T21169] [ 3354.482386][T21169] memory: usage 307200kB, limit 307200kB, failcnt 71643 [ 3354.489746][T21169] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3354.497393][T21169] Memory cgroup stats for /syz2: [ 3354.497673][T21169] anon 94208 [ 3354.497673][T21169] file 368640 [ 3354.497673][T21169] kernel 314109952 [ 3354.497673][T21169] kernel_stack 65536 [ 3354.497673][T21169] pagetables 69632 [ 3354.497673][T21169] sec_pagetables 0 [ 3354.497673][T21169] percpu 5428768 [ 3354.497673][T21169] sock 0 [ 3354.497673][T21169] vmalloc 0 [ 3354.497673][T21169] shmem 348160 [ 3354.497673][T21169] zswap 0 [ 3354.497673][T21169] zswapped 0 [ 3354.497673][T21169] file_mapped 311296 [ 3354.497673][T21169] file_dirty 20480 [ 3354.497673][T21169] file_writeback 0 [ 3354.497673][T21169] swapcached 0 [ 3354.497673][T21169] anon_thp 0 [ 3354.497673][T21169] file_thp 0 [ 3354.497673][T21169] shmem_thp 0 [ 3354.497673][T21169] inactive_anon 45056 [ 3354.497673][T21169] active_anon 397312 [ 3354.497673][T21169] inactive_file 0 [ 3354.497673][T21169] active_file 20480 [ 3354.497673][T21169] unevictable 0 [ 3354.497673][T21169] slab_reclaimable 218392 [ 3354.497673][T21169] slab_unreclaimable 308298080 [ 3354.497673][T21169] slab 308516472 [ 3354.497673][T21169] workingset_refault_anon 0 [ 3354.497673][T21169] workingset_refault_file 0 [ 3354.497673][T21169] workingset_activate_anon 0 [ 3354.497673][T21169] workingset_activate_file 0 [ 3354.497673][T21169] workingset_restore_anon 0 [ 3354.497673][T21169] workingset_restore_file 0 [ 3354.497673][T21169] workingset_nodereclaim 0 [ 3354.497673][T21169] pgscan 54875 [ 3354.497673][T21169] pgsteal 463 [ 3354.497673][T21169] pgscan_kswapd 0 [ 3354.497673][T21169] pgscan_direct 54875 [ 3354.497673][T21169] pgscan_khugepaged 0 [ 3354.497673][T21169] pgsteal_kswapd 0 [ 3354.497673][T21169] pgsteal_direct 463 [ 3354.497673][T21169] pgsteal_khugepaged 0 [ 3354.497673][T21169] pgfault 421835 [ 3354.497673][T21169] pgmajfault 1 [ 3354.497673][T21169] pgrefill 183781 [ 3354.497673][T21169] pgactivate 54373 [ 3354.497673][T21169] pgdeactivate 0 [ 3354.497673][T21169] pglazyfree 0 [ 3354.497673][T21169] pglazyfreed 0 [ 3354.497673][T21169] zswpin 0 [ 3354.497673][T21169] zswpout 0 [ 3354.692814][T21169] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21169,uid=0 [ 3354.709525][T21169] Memory cgroup out of memory: Killed process 21169 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:21 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x24, 0x10, 0x407, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6000}, [@IFLA_IFALIASn={0x4}]}, 0x24}}, 0x1) r1 = epoll_create1(0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x80002008}) 08:19:21 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x49510300) [ 3354.736923][T21170] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3354.774357][T21170] CPU: 1 PID: 21170 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3354.784861][T21170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3354.794963][T21170] Call Trace: [ 3354.798276][T21170] [ 3354.801230][T21170] dump_stack_lvl+0x136/0x150 [ 3354.806031][T21170] dump_header+0x10a/0xd70 [ 3354.810520][T21170] oom_kill_process+0x25d/0x600 [ 3354.815406][T21170] out_of_memory+0x35c/0x1660 [ 3354.820124][T21170] ? oom_killer_disable+0x2b0/0x2b0 [ 3354.825358][T21170] ? rcu_read_unlock+0x9/0x60 [ 3354.830076][T21170] ? find_held_lock+0x2d/0x110 [ 3354.834990][T21170] mem_cgroup_out_of_memory+0x206/0x270 [ 3354.840671][T21170] ? mem_cgroup_margin+0x130/0x130 [ 3354.845839][T21170] ? lock_downgrade+0x690/0x690 [ 3354.850739][T21170] try_charge_memcg+0xf9b/0x13b0 [ 3354.855739][T21170] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3354.861752][T21170] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3354.867520][T21170] ? lock_downgrade+0x690/0x690 [ 3354.872438][T21170] ? lock_downgrade+0x690/0x690 [ 3354.877333][T21170] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3354.882915][T21170] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3354.889115][T21170] copy_process+0x13a7/0x7590 [ 3354.893851][T21170] ? __lock_acquire+0xbc5/0x5d40 [ 3354.898839][T21170] ? __cleanup_sighand+0xb0/0xb0 [ 3354.903821][T21170] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3354.909838][T21170] ? psi_memstall_leave+0x174/0x250 [ 3354.915082][T21170] ? lock_downgrade+0x690/0x690 [ 3354.919973][T21170] kernel_clone+0xeb/0x890 [ 3354.924453][T21170] ? create_io_thread+0xf0/0xf0 [ 3354.929347][T21170] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3354.935654][T21170] ? lock_downgrade+0x690/0x690 [ 3354.940636][T21170] __do_sys_clone+0xba/0x100 [ 3354.945294][T21170] ? kernel_clone+0x890/0x890 [ 3354.950027][T21170] ? syscall_enter_from_user_mode+0x26/0x80 [ 3354.955974][T21170] do_syscall_64+0x39/0xb0 [ 3354.960526][T21170] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3354.966459][T21170] RIP: 0033:0x7f461ea8d591 [ 3354.970921][T21170] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3354.990656][T21170] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3354.999109][T21170] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3355.007117][T21170] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3355.015125][T21170] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3355.023118][T21170] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3355.031116][T21170] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3355.039132][T21170] [ 3355.046429][T21170] memory: usage 307200kB, limit 307200kB, failcnt 82486 [ 3355.085226][T21170] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3355.106035][T21170] Memory cgroup stats for /syz3: [ 3355.106319][T21170] anon 86016 [ 3355.106319][T21170] file 368640 [ 3355.106319][T21170] kernel 314118144 [ 3355.106319][T21170] kernel_stack 32768 [ 3355.106319][T21170] pagetables 69632 [ 3355.106319][T21170] sec_pagetables 0 [ 3355.106319][T21170] percpu 5432256 [ 3355.106319][T21170] sock 0 [ 3355.106319][T21170] vmalloc 8192 [ 3355.106319][T21170] shmem 339968 [ 3355.106319][T21170] zswap 0 [ 3355.106319][T21170] zswapped 0 [ 3355.106319][T21170] file_mapped 327680 [ 3355.106319][T21170] file_dirty 28672 [ 3355.106319][T21170] file_writeback 0 [ 3355.106319][T21170] swapcached 0 [ 3355.106319][T21170] anon_thp 0 [ 3355.106319][T21170] file_thp 0 [ 3355.106319][T21170] shmem_thp 0 [ 3355.106319][T21170] inactive_anon 389120 [ 3355.106319][T21170] active_anon 36864 [ 3355.106319][T21170] inactive_file 0 [ 3355.106319][T21170] active_file 28672 [ 3355.106319][T21170] unevictable 0 [ 3355.106319][T21170] slab_reclaimable 37424 [ 3355.106319][T21170] slab_unreclaimable 308482240 [ 3355.106319][T21170] slab 308519664 [ 3355.106319][T21170] workingset_refault_anon 0 [ 3355.106319][T21170] workingset_refault_file 2 [ 3355.106319][T21170] workingset_activate_anon 0 [ 3355.106319][T21170] workingset_activate_file 0 [ 3355.106319][T21170] workingset_restore_anon 0 [ 3355.106319][T21170] workingset_restore_file 0 [ 3355.106319][T21170] workingset_nodereclaim 0 [ 3355.106319][T21170] pgscan 56183 [ 3355.106319][T21170] pgsteal 455 [ 3355.106319][T21170] pgscan_kswapd 0 [ 3355.106319][T21170] pgscan_direct 56183 [ 3355.106319][T21170] pgscan_khugepaged 0 [ 3355.106319][T21170] pgsteal_kswapd 0 [ 3355.106319][T21170] pgsteal_direct 455 [ 3355.106319][T21170] pgsteal_khugepaged 0 [ 3355.106319][T21170] pgfault 416178 [ 3355.106319][T21170] pgmajfault 1 [ 3355.106319][T21170] pgrefill 214142 [ 3355.106319][T21170] pgactivate 55719 [ 3355.106319][T21170] pgdeactivate 0 [ 3355.106319][T21170] pglazyfree 0 [ 3355.106319][T21170] pglazyfreed 0 [ 3355.106319][T21170] zswpin 0 [ 3355.106319][T21170] zswpout 0 [ 3355.303797][T21170] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21170,uid=0 [ 3355.320494][T21170] Memory cgroup out of memory: Killed process 21170 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3355.343760][T21178] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3355.370860][T21178] CPU: 0 PID: 21178 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3355.381377][T21178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3355.391495][T21178] Call Trace: [ 3355.394908][T21178] [ 3355.397900][T21178] dump_stack_lvl+0x136/0x150 [ 3355.402649][T21178] dump_header+0x10a/0xd70 [ 3355.407144][T21178] oom_kill_process+0x25d/0x600 [ 3355.412068][T21178] out_of_memory+0x35c/0x1660 [ 3355.416829][T21178] ? oom_killer_disable+0x2b0/0x2b0 [ 3355.422102][T21178] ? rcu_read_unlock+0x9/0x60 [ 3355.426857][T21178] ? find_held_lock+0x2d/0x110 [ 3355.431711][T21178] mem_cgroup_out_of_memory+0x206/0x270 [ 3355.437311][T21178] ? mem_cgroup_margin+0x130/0x130 [ 3355.442466][T21178] ? lock_downgrade+0x690/0x690 [ 3355.447362][T21178] try_charge_memcg+0xf9b/0x13b0 [ 3355.452337][T21178] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3355.458364][T21178] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3355.464130][T21178] ? lock_downgrade+0x690/0x690 [ 3355.469015][T21178] ? lock_downgrade+0x690/0x690 [ 3355.473912][T21178] obj_cgroup_charge+0x2af/0x5e0 [ 3355.478883][T21178] ? __anon_vma_prepare+0x64/0x580 [ 3355.484222][T21178] kmem_cache_alloc+0xb1/0x3b0 [ 3355.489061][T21178] __anon_vma_prepare+0x64/0x580 [ 3355.494058][T21178] ? __pmd_alloc+0x30c/0x5d0 [ 3355.498694][T21178] __handle_mm_fault+0x3a8f/0x3e60 [ 3355.503854][T21178] ? vm_iomap_memory+0x190/0x190 [ 3355.508857][T21178] handle_mm_fault+0x2ba/0x9c0 [ 3355.513664][T21178] do_user_addr_fault+0x475/0x1230 [ 3355.518829][T21178] ? rcu_is_watching+0x12/0xb0 [ 3355.523634][T21178] exc_page_fault+0x98/0x170 [ 3355.528349][T21178] asm_exc_page_fault+0x26/0x30 [ 3355.533243][T21178] RIP: 0033:0x7f79ea82bde9 [ 3355.537779][T21178] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3355.557431][T21178] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3355.563527][T21178] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3355.571519][T21178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3355.579539][T21178] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3355.587536][T21178] R10: 00007f79ea400068 R11: 0000000000000246 R12: 00000000003326c5 [ 3355.595533][T21178] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3355.603548][T21178] 08:19:22 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x56, &(0x7f0000000300)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x6, 0x0, @broadcast, @dev}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0x1e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}]}]}, 0x6c}}, 0x801) [ 3355.646791][T21178] memory: usage 307200kB, limit 307200kB, failcnt 78303 [ 3355.657276][T21178] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3355.676944][T21178] Memory cgroup stats for /syz4: [ 3355.677226][T21178] anon 135168 [ 3355.677226][T21178] file 327680 [ 3355.677226][T21178] kernel 314109952 [ 3355.677226][T21178] kernel_stack 65536 [ 3355.677226][T21178] pagetables 77824 [ 3355.677226][T21178] sec_pagetables 0 [ 3355.677226][T21178] percpu 5432256 [ 3355.677226][T21178] sock 0 [ 3355.677226][T21178] vmalloc 0 [ 3355.677226][T21178] shmem 311296 [ 3355.677226][T21178] zswap 0 [ 3355.677226][T21178] zswapped 0 [ 3355.677226][T21178] file_mapped 311296 [ 3355.677226][T21178] file_dirty 12288 [ 3355.677226][T21178] file_writeback 0 [ 3355.677226][T21178] swapcached 0 [ 3355.677226][T21178] anon_thp 0 [ 3355.677226][T21178] file_thp 0 [ 3355.677226][T21178] shmem_thp 0 [ 3355.677226][T21178] inactive_anon 61440 [ 3355.677226][T21178] active_anon 385024 [ 3355.677226][T21178] inactive_file 0 [ 3355.677226][T21178] active_file 16384 [ 3355.677226][T21178] unevictable 0 [ 3355.677226][T21178] slab_reclaimable 17400 [ 3355.677226][T21178] slab_unreclaimable 308486536 [ 3355.677226][T21178] slab 308503936 [ 3355.677226][T21178] workingset_refault_anon 0 [ 3355.677226][T21178] workingset_refault_file 0 [ 3355.677226][T21178] workingset_activate_anon 0 [ 3355.677226][T21178] workingset_activate_file 0 [ 3355.677226][T21178] workingset_restore_anon 0 [ 3355.677226][T21178] workingset_restore_file 0 [ 3355.677226][T21178] workingset_nodereclaim 0 [ 3355.677226][T21178] pgscan 50490 [ 3355.677226][T21178] pgsteal 491 [ 3355.677226][T21178] pgscan_kswapd 0 [ 3355.677226][T21178] pgscan_direct 50490 [ 3355.677226][T21178] pgscan_khugepaged 0 [ 3355.677226][T21178] pgsteal_kswapd 0 [ 3355.677226][T21178] pgsteal_direct 491 [ 3355.677226][T21178] pgsteal_khugepaged 0 [ 3355.677226][T21178] pgfault 405127 [ 3355.677226][T21178] pgmajfault 1 [ 3355.677226][T21178] pgrefill 140412 [ 3355.677226][T21178] pgactivate 49938 [ 3355.677226][T21178] pgdeactivate 0 [ 3355.677226][T21178] pglazyfree 0 [ 3355.677226][T21178] pglazyfreed 0 [ 3355.677226][T21178] zswpin 0 [ 3355.677226][T21178] zswpout 0 [ 3355.880282][T21178] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21178,uid=0 08:19:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd653030000000000) [ 3355.904985][T21178] Memory cgroup out of memory: Killed process 21178 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3355.947458][T21185] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3355.985141][T21185] CPU: 1 PID: 21185 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3355.995659][T21185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3356.005777][T21185] Call Trace: [ 3356.009108][T21185] [ 3356.012083][T21185] dump_stack_lvl+0x136/0x150 [ 3356.016835][T21185] dump_header+0x10a/0xd70 [ 3356.021335][T21185] oom_kill_process+0x25d/0x600 [ 3356.026276][T21185] out_of_memory+0x35c/0x1660 [ 3356.031044][T21185] ? oom_killer_disable+0x2b0/0x2b0 [ 3356.036319][T21185] ? rcu_read_unlock+0x9/0x60 [ 3356.041163][T21185] ? find_held_lock+0x2d/0x110 [ 3356.046021][T21185] mem_cgroup_out_of_memory+0x206/0x270 [ 3356.051659][T21185] ? mem_cgroup_margin+0x130/0x130 [ 3356.056862][T21185] ? lock_downgrade+0x690/0x690 [ 3356.061813][T21185] try_charge_memcg+0xf9b/0x13b0 [ 3356.066828][T21185] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3356.072875][T21185] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3356.078680][T21185] ? lock_downgrade+0x690/0x690 [ 3356.083617][T21185] ? lock_downgrade+0x690/0x690 [ 3356.088557][T21185] obj_cgroup_charge+0x2af/0x5e0 [ 3356.093576][T21185] ? sock_alloc_inode+0x27/0x1d0 [ 3356.098597][T21185] kmem_cache_alloc_lru+0x142/0x600 [ 3356.103903][T21185] sock_alloc_inode+0x27/0x1d0 [ 3356.108746][T21185] ? sock_free_inode+0x30/0x30 [ 3356.113583][T21185] alloc_inode+0x61/0x230 [ 3356.118001][T21185] new_inode_pseudo+0x17/0x80 [ 3356.122761][T21185] sock_alloc+0x40/0x270 [ 3356.127053][T21185] __sock_create+0xbd/0x850 [ 3356.131606][T21185] __sys_socket+0x133/0x250 [ 3356.136155][T21185] ? __sys_socket_file+0x1d0/0x1d0 [ 3356.141320][T21185] __x64_sys_socket+0x73/0xb0 [ 3356.146044][T21185] do_syscall_64+0x39/0xb0 [ 3356.150508][T21185] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.156441][T21185] RIP: 0033:0x7f0e44a8c169 [ 3356.160969][T21185] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3356.180619][T21185] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3356.189091][T21185] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 08:19:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x408affffffff) [ 3356.197093][T21185] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3356.205088][T21185] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3356.213084][T21185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3356.221273][T21185] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3356.229302][T21185] [ 3356.247022][T21185] memory: usage 307200kB, limit 307200kB, failcnt 74792 [ 3356.255643][T21185] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3356.263443][T21185] Memory cgroup stats for /syz5: [ 3356.263734][T21185] anon 90112 [ 3356.263734][T21185] file 356352 [ 3356.263734][T21185] kernel 314109952 [ 3356.263734][T21185] kernel_stack 65536 [ 3356.263734][T21185] pagetables 73728 [ 3356.263734][T21185] sec_pagetables 0 [ 3356.263734][T21185] percpu 5432688 [ 3356.263734][T21185] sock 0 [ 3356.263734][T21185] vmalloc 20480 [ 3356.263734][T21185] shmem 344064 [ 3356.263734][T21185] zswap 0 [ 3356.263734][T21185] zswapped 0 [ 3356.263734][T21185] file_mapped 327680 [ 3356.263734][T21185] file_dirty 12288 [ 3356.263734][T21185] file_writeback 0 [ 3356.263734][T21185] swapcached 0 [ 3356.263734][T21185] anon_thp 0 [ 3356.263734][T21185] file_thp 0 [ 3356.263734][T21185] shmem_thp 0 [ 3356.263734][T21185] inactive_anon 24576 [ 3356.263734][T21185] active_anon 409600 [ 3356.263734][T21185] inactive_file 12288 [ 3356.263734][T21185] active_file 0 [ 3356.263734][T21185] unevictable 0 [ 3356.263734][T21185] slab_reclaimable 12712 [ 3356.263734][T21185] slab_unreclaimable 308478384 [ 3356.263734][T21185] slab 308491096 [ 3356.263734][T21185] workingset_refault_anon 0 [ 3356.263734][T21185] workingset_refault_file 1 [ 3356.263734][T21185] workingset_activate_anon 0 [ 3356.263734][T21185] workingset_activate_file 0 [ 3356.263734][T21185] workingset_restore_anon 0 [ 3356.263734][T21185] workingset_restore_file 0 [ 3356.263734][T21185] workingset_nodereclaim 0 [ 3356.263734][T21185] pgscan 43215 [ 3356.263734][T21185] pgsteal 456 [ 3356.263734][T21185] pgscan_kswapd 0 [ 3356.263734][T21185] pgscan_direct 43215 [ 3356.263734][T21185] pgscan_khugepaged 0 [ 3356.263734][T21185] pgsteal_kswapd 0 [ 3356.263734][T21185] pgsteal_direct 456 [ 3356.263734][T21185] pgsteal_khugepaged 0 [ 3356.263734][T21185] pgfault 412219 [ 3356.263734][T21185] pgmajfault 0 [ 3356.263734][T21185] pgrefill 143790 [ 3356.263734][T21185] pgactivate 42744 [ 3356.263734][T21185] pgdeactivate 0 [ 3356.263734][T21185] pglazyfree 0 [ 3356.263734][T21185] pglazyfreed 0 [ 3356.263734][T21185] zswpin 0 [ 3356.263734][T21185] zswpout 0 [ 3356.454507][T21185] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21181,uid=0 [ 3356.470919][T21185] Memory cgroup out of memory: Killed process 21181 (syz-executor.5) total-vm:54548kB, anon-rss:456kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3356.489143][T21186] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3356.499954][T21186] CPU: 1 PID: 21186 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3356.510461][T21186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3356.520569][T21186] Call Trace: [ 3356.522407][T21185] socket: no more sockets [ 3356.523870][T21186] [ 3356.523886][T21186] dump_stack_lvl+0x136/0x150 [ 3356.523929][T21186] dump_header+0x10a/0xd70 [ 3356.540447][T21186] oom_kill_process+0x25d/0x600 [ 3356.545385][T21186] out_of_memory+0x35c/0x1660 [ 3356.550183][T21186] ? oom_killer_disable+0x2b0/0x2b0 [ 3356.555453][T21186] ? rcu_read_unlock+0x9/0x60 [ 3356.560217][T21186] ? find_held_lock+0x2d/0x110 [ 3356.565045][T21186] mem_cgroup_out_of_memory+0x206/0x270 [ 3356.570641][T21186] ? mem_cgroup_margin+0x130/0x130 [ 3356.575800][T21186] ? lock_downgrade+0x690/0x690 [ 3356.580709][T21186] try_charge_memcg+0xf9b/0x13b0 [ 3356.585686][T21186] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3356.591712][T21186] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3356.597481][T21186] ? lock_downgrade+0x690/0x690 [ 3356.602376][T21186] ? lock_downgrade+0x690/0x690 [ 3356.607279][T21186] obj_cgroup_charge+0x2af/0x5e0 [ 3356.612259][T21186] ? sock_alloc_inode+0x27/0x1d0 [ 3356.617232][T21186] kmem_cache_alloc_lru+0x142/0x600 [ 3356.626059][T21186] sock_alloc_inode+0x27/0x1d0 [ 3356.630872][T21186] ? sock_free_inode+0x30/0x30 [ 3356.635676][T21186] alloc_inode+0x61/0x230 [ 3356.640059][T21186] new_inode_pseudo+0x17/0x80 [ 3356.644806][T21186] sock_alloc+0x40/0x270 [ 3356.649110][T21186] __sock_create+0xbd/0x850 [ 3356.653649][T21186] ? xfd_validate_state+0x5d/0x180 [ 3356.658802][T21186] __sys_socket+0x133/0x250 [ 3356.663369][T21186] ? __sys_socket_file+0x1d0/0x1d0 [ 3356.668548][T21186] __x64_sys_socket+0x73/0xb0 [ 3356.673277][T21186] do_syscall_64+0x39/0xb0 [ 3356.677749][T21186] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3356.683684][T21186] RIP: 0033:0x7f9ac628c169 [ 3356.688133][T21186] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3356.708032][T21186] RSP: 002b:00007f9ac6f61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3356.716475][T21186] RAX: ffffffffffffffda RBX: 00007f9ac63abf80 RCX: 00007f9ac628c169 [ 3356.724490][T21186] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3356.732487][T21186] RBP: 00007f9ac62e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3356.740486][T21186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 08:19:23 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdc4b0300) [ 3356.748485][T21186] R13: 00007ffc61d0e97f R14: 00007f9ac6f61300 R15: 0000000000022000 [ 3356.756511][T21186] [ 3356.770679][T21186] memory: usage 307188kB, limit 307200kB, failcnt 71752 [ 3356.798121][T21186] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3356.805145][T21186] Memory cgroup stats for /syz2: [ 3356.805403][T21186] anon 90112 [ 3356.805403][T21186] file 372736 [ 3356.805403][T21186] kernel 314093568 [ 3356.805403][T21186] kernel_stack 65536 [ 3356.805403][T21186] pagetables 69632 [ 3356.805403][T21186] sec_pagetables 0 [ 3356.805403][T21186] percpu 5428704 [ 3356.805403][T21186] sock 0 [ 3356.805403][T21186] vmalloc 0 [ 3356.805403][T21186] shmem 348160 [ 3356.805403][T21186] zswap 0 [ 3356.805403][T21186] zswapped 0 [ 3356.805403][T21186] file_mapped 311296 [ 3356.805403][T21186] file_dirty 0 [ 3356.805403][T21186] file_writeback 0 [ 3356.805403][T21186] swapcached 0 [ 3356.805403][T21186] anon_thp 0 [ 3356.805403][T21186] file_thp 0 [ 3356.805403][T21186] shmem_thp 0 [ 3356.805403][T21186] inactive_anon 401408 [ 3356.805403][T21186] active_anon 36864 [ 3356.805403][T21186] inactive_file 0 [ 3356.805403][T21186] active_file 24576 [ 3356.805403][T21186] unevictable 0 [ 3356.805403][T21186] slab_reclaimable 216704 [ 3356.805403][T21186] slab_unreclaimable 308285520 [ 3356.805403][T21186] slab 308502224 [ 3356.805403][T21186] workingset_refault_anon 0 [ 3356.805403][T21186] workingset_refault_file 0 [ 3356.805403][T21186] workingset_activate_anon 0 [ 3356.805403][T21186] workingset_activate_file 0 [ 3356.805403][T21186] workingset_restore_anon 0 [ 3356.805403][T21186] workingset_restore_file 0 [ 3356.805403][T21186] workingset_nodereclaim 0 [ 3356.805403][T21186] pgscan 54937 [ 3356.805403][T21186] pgsteal 463 [ 3356.805403][T21186] pgscan_kswapd 0 [ 3356.805403][T21186] pgscan_direct 54937 [ 3356.805403][T21186] pgscan_khugepaged 0 [ 3356.805403][T21186] pgsteal_kswapd 0 [ 3356.805403][T21186] pgsteal_direct 463 [ 3356.805403][T21186] pgsteal_khugepaged 0 [ 3356.805403][T21186] pgfault 421876 [ 3356.805403][T21186] pgmajfault 1 [ 3356.805403][T21186] pgrefill 184434 [ 3356.805403][T21186] pgactivate 54435 [ 3356.805403][T21186] pgdeactivate 0 [ 3356.805403][T21186] pglazyfree 0 [ 3356.805403][T21186] pglazyfreed 0 [ 3356.805403][T21186] zswpin 0 [ 3356.805403][T21186] zswpout 0 [ 3357.012819][T21186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21183,uid=0 [ 3357.037178][T21186] Memory cgroup out of memory: Killed process 21183 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:23 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4a000000) [ 3357.076996][T21182] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3357.088082][T21182] CPU: 0 PID: 21182 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3357.098572][T21182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3357.108686][T21182] Call Trace: [ 3357.112012][T21182] [ 3357.115078][T21182] dump_stack_lvl+0x136/0x150 [ 3357.119829][T21182] dump_header+0x10a/0xd70 [ 3357.124328][T21182] oom_kill_process+0x25d/0x600 [ 3357.129256][T21182] out_of_memory+0x35c/0x1660 [ 3357.134014][T21182] ? oom_killer_disable+0x2b0/0x2b0 [ 3357.139375][T21182] ? rcu_read_unlock+0x9/0x60 [ 3357.144126][T21182] ? find_held_lock+0x2d/0x110 [ 3357.148983][T21182] mem_cgroup_out_of_memory+0x206/0x270 [ 3357.154630][T21182] ? mem_cgroup_margin+0x130/0x130 [ 3357.159819][T21182] ? lock_downgrade+0x690/0x690 [ 3357.164942][T21182] try_charge_memcg+0xf9b/0x13b0 [ 3357.169957][T21182] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3357.176001][T21182] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3357.181811][T21182] ? lock_downgrade+0x690/0x690 [ 3357.186752][T21182] ? lock_downgrade+0x690/0x690 [ 3357.191687][T21182] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3357.197304][T21182] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3357.203620][T21182] copy_process+0x13a7/0x7590 [ 3357.208396][T21182] ? __lock_acquire+0xbc5/0x5d40 [ 3357.213394][T21182] ? __cleanup_sighand+0xb0/0xb0 [ 3357.218384][T21182] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3357.224399][T21182] ? psi_memstall_leave+0x174/0x250 [ 3357.229639][T21182] ? lock_downgrade+0x690/0x690 [ 3357.234541][T21182] kernel_clone+0xeb/0x890 [ 3357.239009][T21182] ? create_io_thread+0xf0/0xf0 [ 3357.243946][T21182] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3357.250273][T21182] ? lock_downgrade+0x690/0x690 [ 3357.255315][T21182] __do_sys_clone+0xba/0x100 [ 3357.259973][T21182] ? kernel_clone+0x890/0x890 [ 3357.264697][T21182] ? syscall_enter_from_user_mode+0x26/0x80 [ 3357.270647][T21182] do_syscall_64+0x39/0xb0 [ 3357.275238][T21182] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3357.281184][T21182] RIP: 0033:0x7faa0ba8d591 [ 3357.285640][T21182] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3357.305312][T21182] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3357.313787][T21182] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3357.321793][T21182] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3357.329795][T21182] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3357.337789][T21182] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3357.345837][T21182] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3357.353887][T21182] [ 3357.362248][T21182] memory: usage 307200kB, limit 307200kB, failcnt 95333 [ 3357.369429][T21182] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3357.376398][T21182] Memory cgroup stats for /syz1: [ 3357.376702][T21182] anon 102400 [ 3357.376702][T21182] file 360448 [ 3357.376702][T21182] kernel 314109952 [ 3357.376702][T21182] kernel_stack 65536 [ 3357.376702][T21182] pagetables 81920 [ 3357.376702][T21182] sec_pagetables 0 [ 3357.376702][T21182] percpu 5423968 [ 3357.376702][T21182] sock 0 [ 3357.376702][T21182] vmalloc 16384 [ 3357.376702][T21182] shmem 339968 [ 3357.376702][T21182] zswap 0 [ 3357.376702][T21182] zswapped 0 [ 3357.376702][T21182] file_mapped 262144 [ 3357.376702][T21182] file_dirty 0 [ 3357.376702][T21182] file_writeback 0 [ 3357.376702][T21182] swapcached 0 [ 3357.376702][T21182] anon_thp 0 [ 3357.376702][T21182] file_thp 0 [ 3357.376702][T21182] shmem_thp 0 [ 3357.376702][T21182] inactive_anon 40960 [ 3357.376702][T21182] active_anon 401408 [ 3357.376702][T21182] inactive_file 0 [ 3357.376702][T21182] active_file 20480 [ 3357.376702][T21182] unevictable 0 [ 3357.376702][T21182] slab_reclaimable 248160 [ 3357.376702][T21182] slab_unreclaimable 308229776 [ 3357.376702][T21182] slab 308477936 [ 3357.376702][T21182] workingset_refault_anon 0 [ 3357.376702][T21182] workingset_refault_file 4 [ 3357.376702][T21182] workingset_activate_anon 0 [ 3357.376702][T21182] workingset_activate_file 0 [ 3357.376702][T21182] workingset_restore_anon 0 [ 3357.376702][T21182] workingset_restore_file 2 [ 3357.376702][T21182] workingset_nodereclaim 0 [ 3357.376702][T21182] pgscan 79860 [ 3357.376702][T21182] pgsteal 601 [ 3357.376702][T21182] pgscan_kswapd 0 [ 3357.376702][T21182] pgscan_direct 79860 [ 3357.376702][T21182] pgscan_khugepaged 0 [ 3357.376702][T21182] pgsteal_kswapd 0 [ 3357.376702][T21182] pgsteal_direct 601 [ 3357.376702][T21182] pgsteal_khugepaged 0 [ 3357.376702][T21182] pgfault 410178 [ 3357.376702][T21182] pgmajfault 0 [ 3357.376702][T21182] pgrefill 217546 [ 3357.376702][T21182] pgactivate 79166 [ 3357.376702][T21182] pgdeactivate 0 [ 3357.376702][T21182] pglazyfree 0 [ 3357.376702][T21182] pglazyfreed 0 [ 3357.376702][T21182] zswpin 0 [ 3357.376702][T21182] zswpout 0 08:19:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4000000000000) 08:19:24 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900100001000070400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x190}}, 0x0) [ 3357.566485][T21182] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21182,uid=0 [ 3357.582626][T21182] Memory cgroup out of memory: Killed process 21182 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3357.616675][T21188] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3357.669879][T21188] CPU: 0 PID: 21188 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3357.680464][T21188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3357.690603][T21188] Call Trace: [ 3357.693930][T21188] [ 3357.696912][T21188] dump_stack_lvl+0x136/0x150 [ 3357.701657][T21188] dump_header+0x10a/0xd70 [ 3357.706153][T21188] oom_kill_process+0x25d/0x600 [ 3357.711075][T21188] out_of_memory+0x35c/0x1660 [ 3357.715836][T21188] ? oom_killer_disable+0x2b0/0x2b0 [ 3357.721111][T21188] ? rcu_read_unlock+0x9/0x60 [ 3357.725846][T21188] ? find_held_lock+0x2d/0x110 [ 3357.730660][T21188] mem_cgroup_out_of_memory+0x206/0x270 [ 3357.736342][T21188] ? mem_cgroup_margin+0x130/0x130 [ 3357.741493][T21188] ? lock_downgrade+0x690/0x690 [ 3357.746487][T21188] try_charge_memcg+0xf9b/0x13b0 [ 3357.751517][T21188] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3357.757547][T21188] ? rcu_read_unlock+0x9/0x60 [ 3357.762268][T21188] ? lock_downgrade+0x690/0x690 [ 3357.767175][T21188] charge_memcg+0x90/0x3b0 [ 3357.771654][T21188] __mem_cgroup_charge+0x2b/0x90 [ 3357.776762][T21188] do_wp_page+0x8eb/0x3520 [ 3357.781235][T21188] ? lock_release+0x670/0x670 [ 3357.785952][T21188] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3357.791366][T21188] ? do_raw_spin_lock+0x124/0x2b0 [ 3357.796532][T21188] ? spin_bug+0x1c0/0x1c0 [ 3357.800924][T21188] ? lock_downgrade+0x690/0x690 [ 3357.805950][T21188] __handle_mm_fault+0x19a1/0x3e60 [ 3357.811660][T21188] ? vm_iomap_memory+0x190/0x190 [ 3357.816675][T21188] handle_mm_fault+0x2ba/0x9c0 [ 3357.821502][T21188] do_user_addr_fault+0x475/0x1230 [ 3357.826678][T21188] ? rcu_is_watching+0x12/0xb0 [ 3357.831499][T21188] exc_page_fault+0x98/0x170 [ 3357.836134][T21188] asm_exc_page_fault+0x26/0x30 [ 3357.841199][T21188] RIP: 0033:0x7f79ea839610 [ 3357.845638][T21188] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3357.865277][T21188] RSP: 002b:00007ffd939e5ce0 EFLAGS: 00010246 [ 3357.871369][T21188] RAX: 0000000001f9bb79 RBX: 00007f79ea9ac018 RCX: 0000001b2d020000 [ 3357.879367][T21188] RDX: 0000000000000000 RSI: 0000001b2d020018 RDI: 000000000a26eed4 [ 3357.887396][T21188] RBP: 0000000001f9bb79 R08: 0000000000001b79 R09: 0000000001f9bb7d [ 3357.895395][T21188] R10: 00007ffd939e5ea0 R11: 0000000000000246 R12: 00007f79ea9a0000 [ 3357.903391][T21188] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83d3ec71 [ 3357.911389][T21188] ? apparmor_socket_create+0x151/0x670 [ 3357.916993][T21188] [ 3357.986935][T21188] memory: usage 307184kB, limit 307200kB, failcnt 78399 [ 3358.007711][T21188] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3358.014863][T21188] Memory cgroup stats for /syz4: [ 3358.015145][T21188] anon 131072 [ 3358.015145][T21188] file 323584 [ 3358.015145][T21188] kernel 314101760 [ 3358.015145][T21188] kernel_stack 65536 [ 3358.015145][T21188] pagetables 69632 [ 3358.015145][T21188] sec_pagetables 0 [ 3358.015145][T21188] percpu 5432256 [ 3358.015145][T21188] sock 0 [ 3358.015145][T21188] vmalloc 0 [ 3358.015145][T21188] shmem 311296 [ 3358.015145][T21188] zswap 0 [ 3358.015145][T21188] zswapped 0 [ 3358.015145][T21188] file_mapped 311296 [ 3358.015145][T21188] file_dirty 0 [ 3358.015145][T21188] file_writeback 0 [ 3358.015145][T21188] swapcached 0 [ 3358.015145][T21188] anon_thp 0 [ 3358.015145][T21188] file_thp 0 [ 3358.015145][T21188] shmem_thp 0 [ 3358.015145][T21188] inactive_anon 49152 [ 3358.015145][T21188] active_anon 393216 [ 3358.015145][T21188] inactive_file 0 [ 3358.015145][T21188] active_file 12288 [ 3358.015145][T21188] unevictable 0 [ 3358.015145][T21188] slab_reclaimable 17160 [ 3358.015145][T21188] slab_unreclaimable 308486840 [ 3358.015145][T21188] slab 308504000 [ 3358.015145][T21188] workingset_refault_anon 0 [ 3358.015145][T21188] workingset_refault_file 0 [ 3358.015145][T21188] workingset_activate_anon 0 [ 3358.015145][T21188] workingset_activate_file 0 [ 3358.015145][T21188] workingset_restore_anon 0 [ 3358.015145][T21188] workingset_restore_file 0 [ 3358.015145][T21188] workingset_nodereclaim 0 [ 3358.015145][T21188] pgscan 50599 [ 3358.015145][T21188] pgsteal 492 [ 3358.015145][T21188] pgscan_kswapd 0 [ 3358.015145][T21188] pgscan_direct 50599 [ 3358.015145][T21188] pgscan_khugepaged 0 [ 3358.015145][T21188] pgsteal_kswapd 0 [ 3358.015145][T21188] pgsteal_direct 492 [ 3358.015145][T21188] pgsteal_khugepaged 0 [ 3358.015145][T21188] pgfault 405186 [ 3358.015145][T21188] pgmajfault 1 [ 3358.015145][T21188] pgrefill 140646 [ 3358.015145][T21188] pgactivate 50046 [ 3358.015145][T21188] pgdeactivate 0 [ 3358.015145][T21188] pglazyfree 0 [ 3358.015145][T21188] pglazyfreed 0 [ 3358.015145][T21188] zswpin 0 [ 3358.015145][T21188] zswpout 0 [ 3358.204531][T21188] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21188,uid=0 [ 3358.220461][T21188] Memory cgroup out of memory: Killed process 21188 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:24 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd753030000000000) [ 3358.246068][T21195] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3358.257631][T21195] CPU: 0 PID: 21195 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3358.268131][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3358.278240][T21195] Call Trace: [ 3358.281570][T21195] [ 3358.284560][T21195] dump_stack_lvl+0x136/0x150 [ 3358.289316][T21195] dump_header+0x10a/0xd70 [ 3358.293922][T21195] oom_kill_process+0x25d/0x600 [ 3358.298856][T21195] out_of_memory+0x35c/0x1660 [ 3358.303631][T21195] ? oom_killer_disable+0x2b0/0x2b0 [ 3358.308922][T21195] ? rcu_read_unlock+0x9/0x60 [ 3358.313664][T21195] ? find_held_lock+0x2d/0x110 [ 3358.318489][T21195] mem_cgroup_out_of_memory+0x206/0x270 [ 3358.324108][T21195] ? mem_cgroup_margin+0x130/0x130 [ 3358.329291][T21195] ? lock_downgrade+0x690/0x690 [ 3358.334194][T21195] try_charge_memcg+0xf9b/0x13b0 [ 3358.339177][T21195] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3358.345198][T21195] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3358.350974][T21195] ? lock_downgrade+0x690/0x690 [ 3358.355900][T21195] ? lock_downgrade+0x690/0x690 [ 3358.360806][T21195] obj_cgroup_charge+0x2af/0x5e0 [ 3358.365790][T21195] ? sock_alloc_inode+0x27/0x1d0 [ 3358.370774][T21195] kmem_cache_alloc_lru+0x142/0x600 [ 3358.376031][T21195] sock_alloc_inode+0x27/0x1d0 [ 3358.380844][T21195] ? sock_free_inode+0x30/0x30 [ 3358.385675][T21195] alloc_inode+0x61/0x230 [ 3358.390049][T21195] new_inode_pseudo+0x17/0x80 [ 3358.394864][T21195] sock_alloc+0x40/0x270 [ 3358.399156][T21195] __sock_create+0xbd/0x850 [ 3358.403709][T21195] ? xfd_validate_state+0x5d/0x180 [ 3358.408867][T21195] __sys_socket+0x133/0x250 [ 3358.413415][T21195] ? __sys_socket_file+0x1d0/0x1d0 [ 3358.418581][T21195] __x64_sys_socket+0x73/0xb0 [ 3358.423315][T21195] do_syscall_64+0x39/0xb0 [ 3358.427780][T21195] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3358.433718][T21195] RIP: 0033:0x7f0e44a8c169 [ 3358.438164][T21195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3358.457807][T21195] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3358.466456][T21195] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3358.474457][T21195] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3358.482541][T21195] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3358.490543][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3358.498541][T21195] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3358.506568][T21195] [ 3358.530198][T21195] memory: usage 307200kB, limit 307200kB, failcnt 74933 [ 3358.540339][T21195] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3358.554237][T21195] Memory cgroup stats for /syz5: [ 3358.554729][T21195] anon 94208 [ 3358.554729][T21195] file 352256 [ 3358.554729][T21195] kernel 314109952 [ 3358.554729][T21195] kernel_stack 65536 [ 3358.554729][T21195] pagetables 73728 [ 3358.554729][T21195] sec_pagetables 0 [ 3358.554729][T21195] percpu 5432688 [ 3358.554729][T21195] sock 0 [ 3358.554729][T21195] vmalloc 20480 [ 3358.554729][T21195] shmem 344064 [ 3358.554729][T21195] zswap 0 [ 3358.554729][T21195] zswapped 0 [ 3358.554729][T21195] file_mapped 327680 [ 3358.554729][T21195] file_dirty 0 [ 3358.554729][T21195] file_writeback 0 [ 3358.554729][T21195] swapcached 0 [ 3358.554729][T21195] anon_thp 0 [ 3358.554729][T21195] file_thp 0 [ 3358.554729][T21195] shmem_thp 0 [ 3358.554729][T21195] inactive_anon 28672 [ 3358.554729][T21195] active_anon 409600 [ 3358.554729][T21195] inactive_file 4096 [ 3358.554729][T21195] active_file 4096 [ 3358.554729][T21195] unevictable 0 [ 3358.554729][T21195] slab_reclaimable 12472 [ 3358.554729][T21195] slab_unreclaimable 308476008 [ 3358.554729][T21195] slab 308488480 [ 3358.554729][T21195] workingset_refault_anon 0 [ 3358.554729][T21195] workingset_refault_file 1 [ 3358.554729][T21195] workingset_activate_anon 0 [ 3358.554729][T21195] workingset_activate_file 0 [ 3358.554729][T21195] workingset_restore_anon 0 [ 3358.554729][T21195] workingset_restore_file 0 [ 3358.554729][T21195] workingset_nodereclaim 0 [ 3358.554729][T21195] pgscan 43309 [ 3358.554729][T21195] pgsteal 457 [ 3358.554729][T21195] pgscan_kswapd 0 [ 3358.554729][T21195] pgscan_direct 43309 [ 3358.554729][T21195] pgscan_khugepaged 0 [ 3358.554729][T21195] pgsteal_kswapd 0 08:19:25 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x20004002) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3358.554729][T21195] pgsteal_direct 457 [ 3358.554729][T21195] pgsteal_khugepaged 0 [ 3358.554729][T21195] pgfault 412263 [ 3358.554729][T21195] pgmajfault 0 [ 3358.554729][T21195] pgrefill 143856 [ 3358.554729][T21195] pgactivate 42837 [ 3358.554729][T21195] pgdeactivate 0 [ 3358.554729][T21195] pglazyfree 0 [ 3358.554729][T21195] pglazyfreed 0 [ 3358.554729][T21195] zswpin 0 [ 3358.554729][T21195] zswpout 0 [ 3358.762972][T21195] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21192,uid=0 [ 3358.789711][T21195] Memory cgroup out of memory: Killed process 21192 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3358.818143][T21193] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3358.835815][T21193] CPU: 0 PID: 21193 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3358.846315][T21193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3358.856428][T21193] Call Trace: [ 3358.859760][T21193] [ 3358.862730][T21193] dump_stack_lvl+0x136/0x150 [ 3358.867485][T21193] dump_header+0x10a/0xd70 [ 3358.871963][T21193] oom_kill_process+0x25d/0x600 [ 3358.876961][T21193] out_of_memory+0x35c/0x1660 [ 3358.881709][T21193] ? oom_killer_disable+0x2b0/0x2b0 [ 3358.887037][T21193] ? rcu_read_unlock+0x9/0x60 [ 3358.891778][T21193] ? find_held_lock+0x2d/0x110 [ 3358.896594][T21193] mem_cgroup_out_of_memory+0x206/0x270 [ 3358.902209][T21193] ? mem_cgroup_margin+0x130/0x130 [ 3358.907361][T21193] ? lock_downgrade+0x690/0x690 [ 3358.912260][T21193] try_charge_memcg+0xf9b/0x13b0 [ 3358.917234][T21193] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3358.923251][T21193] ? rcu_read_unlock+0x9/0x60 [ 3358.927965][T21193] ? lock_downgrade+0x690/0x690 [ 3358.932865][T21193] charge_memcg+0x90/0x3b0 [ 3358.937316][T21193] __mem_cgroup_charge+0x2b/0x90 [ 3358.942287][T21193] do_wp_page+0x8eb/0x3520 [ 3358.946749][T21193] ? lock_release+0x670/0x670 [ 3358.951462][T21193] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3358.956871][T21193] ? do_raw_spin_lock+0x124/0x2b0 [ 3358.961952][T21193] ? spin_bug+0x1c0/0x1c0 [ 3358.966335][T21193] ? lock_downgrade+0x690/0x690 [ 3358.971241][T21193] __handle_mm_fault+0x19a1/0x3e60 [ 3358.976400][T21193] ? vm_iomap_memory+0x190/0x190 [ 3358.981400][T21193] handle_mm_fault+0x2ba/0x9c0 [ 3358.986210][T21193] do_user_addr_fault+0x475/0x1230 [ 3358.991385][T21193] ? rcu_is_watching+0x12/0xb0 [ 3358.996207][T21193] exc_page_fault+0x98/0x170 [ 3359.000839][T21193] asm_exc_page_fault+0x26/0x30 [ 3359.005760][T21193] RIP: 0033:0x7f9ac6239610 [ 3359.010207][T21193] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3359.029854][T21193] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3359.035949][T21193] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3359.043954][T21193] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3359.051952][T21193] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3359.059965][T21193] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 08:19:25 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdd4b0300) [ 3359.067973][T21193] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3359.075974][T21193] ? __x64_sys_socket+0x11/0xb0 [ 3359.080902][T21193] [ 3359.178376][T21193] memory: usage 307184kB, limit 307200kB, failcnt 71854 [ 3359.185415][T21193] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3359.203495][T21193] Memory cgroup stats for /syz2: [ 3359.203776][T21193] anon 98304 [ 3359.203776][T21193] file 364544 [ 3359.203776][T21193] kernel 314093568 [ 3359.203776][T21193] kernel_stack 65536 [ 3359.203776][T21193] pagetables 69632 [ 3359.203776][T21193] sec_pagetables 0 [ 3359.203776][T21193] percpu 5428704 [ 3359.203776][T21193] sock 0 [ 3359.203776][T21193] vmalloc 0 [ 3359.203776][T21193] shmem 348160 [ 3359.203776][T21193] zswap 0 [ 3359.203776][T21193] zswapped 0 [ 3359.203776][T21193] file_mapped 311296 [ 3359.203776][T21193] file_dirty 8192 [ 3359.203776][T21193] file_writeback 0 [ 3359.203776][T21193] swapcached 0 [ 3359.203776][T21193] anon_thp 0 [ 3359.203776][T21193] file_thp 0 [ 3359.203776][T21193] shmem_thp 0 [ 3359.203776][T21193] inactive_anon 40960 [ 3359.203776][T21193] active_anon 405504 [ 3359.203776][T21193] inactive_file 8192 [ 3359.203776][T21193] active_file 8192 [ 3359.203776][T21193] unevictable 0 [ 3359.203776][T21193] slab_reclaimable 218152 [ 3359.203776][T21193] slab_unreclaimable 308286168 [ 3359.203776][T21193] slab 308504320 [ 3359.203776][T21193] workingset_refault_anon 0 [ 3359.203776][T21193] workingset_refault_file 0 [ 3359.203776][T21193] workingset_activate_anon 0 [ 3359.203776][T21193] workingset_activate_file 0 [ 3359.203776][T21193] workingset_restore_anon 0 [ 3359.203776][T21193] workingset_restore_file 0 [ 3359.203776][T21193] workingset_nodereclaim 0 [ 3359.203776][T21193] pgscan 55205 [ 3359.203776][T21193] pgsteal 465 [ 3359.203776][T21193] pgscan_kswapd 0 [ 3359.203776][T21193] pgscan_direct 55205 [ 3359.203776][T21193] pgscan_khugepaged 0 [ 3359.203776][T21193] pgsteal_kswapd 0 [ 3359.203776][T21193] pgsteal_direct 465 [ 3359.203776][T21193] pgsteal_khugepaged 0 [ 3359.203776][T21193] pgfault 421920 [ 3359.203776][T21193] pgmajfault 1 [ 3359.203776][T21193] pgrefill 184485 [ 3359.203776][T21193] pgactivate 54701 [ 3359.203776][T21193] pgdeactivate 0 [ 3359.203776][T21193] pglazyfree 0 [ 3359.203776][T21193] pglazyfreed 0 [ 3359.203776][T21193] zswpin 0 [ 3359.203776][T21193] zswpout 0 [ 3359.393615][T21193] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21193,uid=0 [ 3359.411144][T21193] Memory cgroup out of memory: Killed process 21193 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:25 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4a030000) [ 3359.429475][T21199] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3359.446696][T21199] CPU: 0 PID: 21199 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3359.457219][T21199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3359.467334][T21199] Call Trace: [ 3359.470667][T21199] [ 3359.473648][T21199] dump_stack_lvl+0x136/0x150 [ 3359.478396][T21199] dump_header+0x10a/0xd70 [ 3359.482992][T21199] oom_kill_process+0x25d/0x600 [ 3359.487941][T21199] out_of_memory+0x35c/0x1660 [ 3359.492697][T21199] ? oom_killer_disable+0x2b0/0x2b0 [ 3359.498008][T21199] ? rcu_read_unlock+0x9/0x60 [ 3359.502806][T21199] ? find_held_lock+0x2d/0x110 [ 3359.507655][T21199] mem_cgroup_out_of_memory+0x206/0x270 [ 3359.513279][T21199] ? mem_cgroup_margin+0x130/0x130 [ 3359.518440][T21199] ? lock_downgrade+0x690/0x690 [ 3359.523429][T21199] try_charge_memcg+0xf9b/0x13b0 [ 3359.528412][T21199] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3359.534425][T21199] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3359.540190][T21199] ? lock_downgrade+0x690/0x690 [ 3359.545181][T21199] ? lock_downgrade+0x690/0x690 [ 3359.550081][T21199] obj_cgroup_charge+0x2af/0x5e0 [ 3359.555070][T21199] ? __anon_vma_prepare+0x64/0x580 [ 3359.560318][T21199] kmem_cache_alloc+0xb1/0x3b0 [ 3359.565171][T21199] __anon_vma_prepare+0x64/0x580 [ 3359.570146][T21199] ? __pmd_alloc+0x30c/0x5d0 [ 3359.574784][T21199] __handle_mm_fault+0x3a8f/0x3e60 [ 3359.580054][T21199] ? vm_iomap_memory+0x190/0x190 [ 3359.585055][T21199] handle_mm_fault+0x2ba/0x9c0 [ 3359.589878][T21199] do_user_addr_fault+0x475/0x1230 [ 3359.595038][T21199] ? rcu_is_watching+0x12/0xb0 [ 3359.599843][T21199] exc_page_fault+0x98/0x170 [ 3359.604497][T21199] asm_exc_page_fault+0x26/0x30 [ 3359.609559][T21199] RIP: 0033:0x7faa0ba2bde9 [ 3359.613999][T21199] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3359.633739][T21199] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3359.639837][T21199] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3359.647832][T21199] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3359.655868][T21199] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3359.663877][T21199] R10: 00007faa0b600068 R11: 0000000000000246 R12: 000000000033365b [ 3359.671877][T21199] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3359.679899][T21199] [ 3359.705144][T21199] memory: usage 307200kB, limit 307200kB, failcnt 95444 [ 3359.733433][T21199] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3359.750495][T21199] Memory cgroup stats for /syz1: [ 3359.750980][T21199] anon 126976 [ 3359.750980][T21199] file 352256 [ 3359.750980][T21199] kernel 314077184 [ 3359.750980][T21199] kernel_stack 65536 [ 3359.750980][T21199] pagetables 81920 [ 3359.750980][T21199] sec_pagetables 0 [ 3359.750980][T21199] percpu 5423968 [ 3359.750980][T21199] sock 0 [ 3359.750980][T21199] vmalloc 16384 [ 3359.750980][T21199] shmem 339968 [ 3359.750980][T21199] zswap 0 [ 3359.750980][T21199] zswapped 0 [ 3359.750980][T21199] file_mapped 262144 [ 3359.750980][T21199] file_dirty 8192 [ 3359.750980][T21199] file_writeback 0 [ 3359.750980][T21199] swapcached 0 [ 3359.750980][T21199] anon_thp 0 [ 3359.750980][T21199] file_thp 0 [ 3359.750980][T21199] shmem_thp 0 [ 3359.750980][T21199] inactive_anon 49152 [ 3359.750980][T21199] active_anon 417792 [ 3359.750980][T21199] inactive_file 8192 [ 3359.750980][T21199] active_file 4096 [ 3359.750980][T21199] unevictable 0 [ 3359.750980][T21199] slab_reclaimable 245368 [ 3359.750980][T21199] slab_unreclaimable 308218160 [ 3359.750980][T21199] slab 308463528 [ 3359.750980][T21199] workingset_refault_anon 0 [ 3359.750980][T21199] workingset_refault_file 4 [ 3359.750980][T21199] workingset_activate_anon 0 [ 3359.750980][T21199] workingset_activate_file 0 [ 3359.750980][T21199] workingset_restore_anon 0 [ 3359.750980][T21199] workingset_restore_file 2 [ 3359.750980][T21199] workingset_nodereclaim 0 [ 3359.750980][T21199] pgscan 79947 [ 3359.750980][T21199] pgsteal 604 [ 3359.750980][T21199] pgscan_kswapd 0 [ 3359.750980][T21199] pgscan_direct 79947 [ 3359.750980][T21199] pgscan_khugepaged 0 [ 3359.750980][T21199] pgsteal_kswapd 0 [ 3359.750980][T21199] pgsteal_direct 604 [ 3359.750980][T21199] pgsteal_khugepaged 0 [ 3359.750980][T21199] pgfault 410237 [ 3359.750980][T21199] pgmajfault 0 [ 3359.750980][T21199] pgrefill 217597 [ 3359.750980][T21199] pgactivate 79250 [ 3359.750980][T21199] pgdeactivate 0 [ 3359.750980][T21199] pglazyfree 0 [ 3359.750980][T21199] pglazyfreed 0 [ 3359.750980][T21199] zswpin 0 [ 3359.750980][T21199] zswpout 0 08:19:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x8000000000000) 08:19:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900100001000070400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x190}}, 0x0) [ 3359.950770][T21199] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21199,uid=0 [ 3359.974543][T21199] Memory cgroup out of memory: Killed process 21199 (syz-executor.1) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3359.993099][T21203] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3360.032562][T21203] CPU: 1 PID: 21203 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3360.043072][T21203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3360.053190][T21203] Call Trace: [ 3360.056523][T21203] [ 3360.059509][T21203] dump_stack_lvl+0x136/0x150 [ 3360.064349][T21203] dump_header+0x10a/0xd70 [ 3360.068843][T21203] oom_kill_process+0x25d/0x600 [ 3360.073854][T21203] out_of_memory+0x35c/0x1660 [ 3360.078614][T21203] ? oom_killer_disable+0x2b0/0x2b0 [ 3360.083895][T21203] ? rcu_read_unlock+0x9/0x60 [ 3360.088648][T21203] ? find_held_lock+0x2d/0x110 [ 3360.093513][T21203] mem_cgroup_out_of_memory+0x206/0x270 [ 3360.099137][T21203] ? mem_cgroup_margin+0x130/0x130 [ 3360.104298][T21203] ? lock_downgrade+0x690/0x690 [ 3360.109202][T21203] try_charge_memcg+0xf9b/0x13b0 [ 3360.114180][T21203] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3360.120223][T21203] ? rcu_read_unlock+0x9/0x60 [ 3360.124950][T21203] ? lock_downgrade+0x690/0x690 [ 3360.129855][T21203] charge_memcg+0x90/0x3b0 [ 3360.134311][T21203] __mem_cgroup_charge+0x2b/0x90 [ 3360.139295][T21203] ? copy_mc_to_kernel+0x3e/0x90 [ 3360.144360][T21203] do_wp_page+0x8eb/0x3520 [ 3360.148846][T21203] ? lock_release+0x670/0x670 [ 3360.153558][T21203] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3360.159067][T21203] ? do_raw_spin_lock+0x124/0x2b0 [ 3360.164127][T21203] ? spin_bug+0x1c0/0x1c0 [ 3360.168578][T21203] ? lock_downgrade+0x690/0x690 [ 3360.173473][T21203] __handle_mm_fault+0x19a1/0x3e60 [ 3360.178644][T21203] ? vm_iomap_memory+0x190/0x190 [ 3360.183651][T21203] handle_mm_fault+0x2ba/0x9c0 [ 3360.188465][T21203] do_user_addr_fault+0x475/0x1230 [ 3360.193628][T21203] ? rcu_is_watching+0x12/0xb0 [ 3360.198438][T21203] exc_page_fault+0x98/0x170 [ 3360.203076][T21203] asm_exc_page_fault+0x26/0x30 [ 3360.207967][T21203] RIP: 0033:0x7f461ea36fdd [ 3360.212412][T21203] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3360.232052][T21203] RSP: 002b:00007ffea8ee1f60 EFLAGS: 00010217 [ 3360.238145][T21203] RAX: 0000000000000000 RBX: 00007f461ebabf8c RCX: 00007f461ea8c169 [ 3360.246318][T21203] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f461ebabf88 [ 3360.254317][T21203] RBP: 00007f461ebabf80 R08: 00007f461f7c3700 R09: 0000000000000000 [ 3360.262315][T21203] R10: 00007f461f7c3700 R11: 0000000000000246 R12: 00007f461ebabf8c [ 3360.270316][T21203] R13: 00007f461e600060 R14: 00007f461ebabf80 R15: 0000000000000000 [ 3360.278335][T21203] [ 3360.313341][T21203] memory: usage 307200kB, limit 307200kB, failcnt 82750 [ 3360.346851][T21203] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3360.369671][T21203] Memory cgroup stats for /syz3: [ 3360.370484][T21203] anon 90112 [ 3360.370484][T21203] file 348160 [ 3360.370484][T21203] kernel 314134528 [ 3360.370484][T21203] kernel_stack 65536 [ 3360.370484][T21203] pagetables 69632 [ 3360.370484][T21203] sec_pagetables 0 [ 3360.370484][T21203] percpu 5432256 [ 3360.370484][T21203] sock 0 [ 3360.370484][T21203] vmalloc 8192 [ 3360.370484][T21203] shmem 339968 [ 3360.370484][T21203] zswap 0 [ 3360.370484][T21203] zswapped 0 [ 3360.370484][T21203] file_mapped 327680 [ 3360.370484][T21203] file_dirty 8192 [ 3360.370484][T21203] file_writeback 0 [ 3360.370484][T21203] swapcached 0 [ 3360.370484][T21203] anon_thp 0 [ 3360.370484][T21203] file_thp 0 [ 3360.370484][T21203] shmem_thp 0 [ 3360.370484][T21203] inactive_anon 385024 [ 3360.370484][T21203] active_anon 45056 [ 3360.370484][T21203] inactive_file 0 [ 3360.370484][T21203] active_file 8192 [ 3360.370484][T21203] unevictable 0 [ 3360.370484][T21203] slab_reclaimable 36224 [ 3360.370484][T21203] slab_unreclaimable 308482704 [ 3360.370484][T21203] slab 308518928 [ 3360.370484][T21203] workingset_refault_anon 0 [ 3360.370484][T21203] workingset_refault_file 2 [ 3360.370484][T21203] workingset_activate_anon 0 [ 3360.370484][T21203] workingset_activate_file 0 [ 3360.370484][T21203] workingset_restore_anon 0 [ 3360.370484][T21203] workingset_restore_file 0 [ 3360.370484][T21203] workingset_nodereclaim 0 [ 3360.370484][T21203] pgscan 56333 [ 3360.370484][T21203] pgsteal 460 [ 3360.370484][T21203] pgscan_kswapd 0 [ 3360.370484][T21203] pgscan_direct 56333 [ 3360.370484][T21203] pgscan_khugepaged 0 [ 3360.370484][T21203] pgsteal_kswapd 0 [ 3360.370484][T21203] pgsteal_direct 460 [ 3360.370484][T21203] pgsteal_khugepaged 0 [ 3360.370484][T21203] pgfault 416264 [ 3360.370484][T21203] pgmajfault 1 [ 3360.370484][T21203] pgrefill 215170 [ 3360.370484][T21203] pgactivate 55864 [ 3360.370484][T21203] pgdeactivate 0 [ 3360.370484][T21203] pglazyfree 0 [ 3360.370484][T21203] pglazyfreed 0 [ 3360.370484][T21203] zswpin 0 [ 3360.370484][T21203] zswpout 0 [ 3360.564609][T21203] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21203,uid=0 [ 3360.581310][T21203] Memory cgroup out of memory: Killed process 21203 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3360.608495][T21211] syz-executor.1 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=1, oom_score_adj=1000 [ 3360.646716][T21211] CPU: 1 PID: 21211 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3360.657268][T21211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3360.664695][T21204] socket: no more sockets [ 3360.667342][T21211] Call Trace: [ 3360.667430][T21211] [ 3360.667444][T21211] dump_stack_lvl+0x136/0x150 [ 3360.667484][T21211] dump_header+0x10a/0xd70 [ 3360.667527][T21211] oom_kill_process+0x25d/0x600 [ 3360.667570][T21211] out_of_memory+0x35c/0x1660 [ 3360.667617][T21211] ? oom_killer_disable+0x2b0/0x2b0 [ 3360.702144][T21211] ? rcu_read_unlock+0x9/0x60 [ 3360.706872][T21211] ? find_held_lock+0x2d/0x110 [ 3360.711777][T21211] mem_cgroup_out_of_memory+0x206/0x270 [ 3360.717381][T21211] ? mem_cgroup_margin+0x130/0x130 [ 3360.722536][T21211] ? lock_downgrade+0x690/0x690 [ 3360.727441][T21211] try_charge_memcg+0xf9b/0x13b0 [ 3360.732423][T21211] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3360.738437][T21211] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3360.744232][T21211] ? lock_downgrade+0x690/0x690 [ 3360.749146][T21211] ? lock_downgrade+0x690/0x690 [ 3360.754046][T21211] obj_cgroup_charge+0x2af/0x5e0 [ 3360.759040][T21211] __kmem_cache_alloc_node+0xa3/0x320 [ 3360.764495][T21211] ? ipv6_add_dev+0xfe/0x13b0 [ 3360.769280][T21211] kmalloc_trace+0x26/0xe0 [ 3360.773731][T21211] ipv6_add_dev+0xfe/0x13b0 [ 3360.778274][T21211] addrconf_notify+0x63d/0x19f0 [ 3360.783159][T21211] ? tee_netdev_event+0x2d7/0x390 [ 3360.788279][T21211] ? ip6mr_device_event+0x1af/0x220 [ 3360.793578][T21211] ? mutex_is_locked+0x12/0x50 [ 3360.798410][T21211] notifier_call_chain+0xb5/0x200 [ 3360.803484][T21211] call_netdevice_notifiers_info+0xb5/0x130 [ 3360.809425][T21211] register_netdevice+0xfb4/0x1640 [ 3360.814582][T21211] ? unregister_netdevice_queue+0x3c0/0x3c0 [ 3360.820551][T21211] br_dev_newlink+0x27/0x110 [ 3360.825207][T21211] ? br_changelink+0x1660/0x1660 [ 3360.830194][T21211] __rtnl_newlink+0x10c2/0x1840 [ 3360.835125][T21211] ? find_held_lock+0x2d/0x110 [ 3360.839945][T21211] ? rtnl_link_unregister+0x250/0x250 [ 3360.845361][T21211] ? __kmem_cache_alloc_node+0x48/0x320 [ 3360.850970][T21211] ? rtnl_newlink+0x4a/0xa0 [ 3360.855520][T21211] rtnl_newlink+0x68/0xa0 [ 3360.859892][T21211] ? __rtnl_newlink+0x1840/0x1840 [ 3360.864963][T21211] rtnetlink_rcv_msg+0x43d/0xd50 [ 3360.869961][T21211] ? rtnl_stats_set+0x4d0/0x4d0 [ 3360.874850][T21211] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3360.880010][T21211] ? lockdep_hardirqs_on+0x7d/0x100 [ 3360.885270][T21211] netlink_rcv_skb+0x165/0x440 [ 3360.890165][T21211] ? rtnl_stats_set+0x4d0/0x4d0 [ 3360.895074][T21211] ? netlink_ack+0x1360/0x1360 [ 3360.899986][T21211] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3360.905318][T21211] netlink_unicast+0x547/0x7f0 [ 3360.910136][T21211] ? netlink_attachskb+0x890/0x890 [ 3360.915282][T21211] ? __virt_addr_valid+0x61/0x2e0 [ 3360.920355][T21211] ? __phys_addr_symbol+0x30/0x70 [ 3360.925424][T21211] ? __check_object_size+0x333/0x6e0 [ 3360.930750][T21211] netlink_sendmsg+0x925/0xe30 [ 3360.935567][T21211] ? netlink_unicast+0x7f0/0x7f0 [ 3360.940577][T21211] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3360.945961][T21211] ? netlink_unicast+0x7f0/0x7f0 [ 3360.951038][T21211] sock_sendmsg+0xde/0x190 [ 3360.955541][T21211] ____sys_sendmsg+0x71c/0x900 [ 3360.960393][T21211] ? copy_msghdr_from_user+0xfc/0x150 [ 3360.965818][T21211] ? kernel_sendmsg+0x50/0x50 [ 3360.970598][T21211] ? futex_unqueue+0xb7/0x120 [ 3360.975330][T21211] ? futex_wait+0x503/0x680 [ 3360.979894][T21211] ___sys_sendmsg+0x110/0x1b0 [ 3360.984623][T21211] ? do_recvmmsg+0x6e0/0x6e0 [ 3360.989276][T21211] ? __fget_files+0x248/0x480 [ 3360.994019][T21211] ? lock_downgrade+0x690/0x690 [ 3360.998930][T21211] ? __fget_files+0x26a/0x480 [ 3361.003774][T21211] ? __fget_light+0xe5/0x270 [ 3361.008421][T21211] __sys_sendmsg+0xf7/0x1c0 [ 3361.013058][T21211] ? __sys_sendmsg_sock+0x40/0x40 [ 3361.018130][T21211] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3361.024088][T21211] ? syscall_enter_from_user_mode+0x26/0x80 [ 3361.030025][T21211] ? lockdep_hardirqs_on+0x7d/0x100 [ 3361.035272][T21211] do_syscall_64+0x39/0xb0 [ 3361.039737][T21211] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3361.045668][T21211] RIP: 0033:0x7faa0ba8c169 [ 3361.050112][T21211] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3361.069751][T21211] RSP: 002b:00007faa0c8d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3361.078195][T21211] RAX: ffffffffffffffda RBX: 00007faa0bbabf80 RCX: 00007faa0ba8c169 [ 3361.086220][T21211] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3361.094217][T21211] RBP: 00007faa0bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3361.102212][T21211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3361.110208][T21211] R13: 00007ffd537ccaef R14: 00007faa0c8d1300 R15: 0000000000022000 [ 3361.118399][T21211] [ 3361.125043][T21211] memory: usage 307200kB, limit 307200kB, failcnt 95548 [ 3361.132296][T21211] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3361.140957][T21211] Memory cgroup stats for /syz1: 08:19:27 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x20004002) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3361.141239][T21211] anon 98304 [ 3361.141239][T21211] file 352256 [ 3361.141239][T21211] kernel 314122240 [ 3361.141239][T21211] kernel_stack 65536 [ 3361.141239][T21211] pagetables 81920 [ 3361.141239][T21211] sec_pagetables 0 [ 3361.141239][T21211] percpu 5424032 [ 3361.141239][T21211] sock 0 [ 3361.141239][T21211] vmalloc 24576 [ 3361.141239][T21211] shmem 339968 [ 3361.141239][T21211] zswap 0 [ 3361.141239][T21211] zswapped 0 [ 3361.141239][T21211] file_mapped 262144 [ 3361.141239][T21211] file_dirty 8192 [ 3361.141239][T21211] file_writeback 0 [ 3361.141239][T21211] swapcached 0 [ 3361.141239][T21211] anon_thp 0 [ 3361.141239][T21211] file_thp 0 [ 3361.141239][T21211] shmem_thp 0 [ 3361.141239][T21211] inactive_anon 49152 [ 3361.141239][T21211] active_anon 389120 [ 3361.141239][T21211] inactive_file 12288 [ 3361.141239][T21211] active_file 0 [ 3361.141239][T21211] unevictable 0 [ 3361.141239][T21211] slab_reclaimable 245368 [ 3361.141239][T21211] slab_unreclaimable 308249928 [ 3361.141239][T21211] slab 308495296 [ 3361.141239][T21211] workingset_refault_anon 0 [ 3361.141239][T21211] workingset_refault_file 4 [ 3361.141239][T21211] workingset_activate_anon 0 [ 3361.141239][T21211] workingset_activate_file 0 [ 3361.141239][T21211] workingset_restore_anon 0 [ 3361.141239][T21211] workingset_restore_file 2 [ 3361.141239][T21211] workingset_nodereclaim 0 [ 3361.141239][T21211] pgscan 79979 [ 3361.141239][T21211] pgsteal 605 [ 3361.141239][T21211] pgscan_kswapd 0 [ 3361.141239][T21211] pgscan_direct 79979 [ 3361.141239][T21211] pgscan_khugepaged 0 [ 3361.141239][T21211] pgsteal_kswapd 0 [ 3361.141239][T21211] pgsteal_direct 605 [ 3361.141239][T21211] pgsteal_khugepaged 0 [ 3361.141239][T21211] pgfault 410280 [ 3361.141239][T21211] pgmajfault 0 [ 3361.141239][T21211] pgrefill 217721 [ 3361.141239][T21211] pgactivate 79281 [ 3361.141239][T21211] pgdeactivate 0 [ 3361.141239][T21211] pglazyfree 0 [ 3361.141239][T21211] pglazyfreed 0 [ 3361.141239][T21211] zswpin 0 [ 3361.141239][T21211] zswpout 0 [ 3361.331827][T21211] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21210,uid=0 [ 3361.351631][T21211] Memory cgroup out of memory: Killed process 21211 (syz-executor.1) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3361.372769][T21207] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3361.400281][T21207] CPU: 1 PID: 21207 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3361.410787][T21207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3361.420902][T21207] Call Trace: [ 3361.424226][T21207] [ 3361.427203][T21207] dump_stack_lvl+0x136/0x150 [ 3361.431940][T21207] dump_header+0x10a/0xd70 [ 3361.436428][T21207] oom_kill_process+0x25d/0x600 [ 3361.441363][T21207] out_of_memory+0x35c/0x1660 [ 3361.446115][T21207] ? oom_killer_disable+0x2b0/0x2b0 [ 3361.451374][T21207] ? rcu_read_unlock+0x9/0x60 [ 3361.456112][T21207] ? find_held_lock+0x2d/0x110 [ 3361.460945][T21207] mem_cgroup_out_of_memory+0x206/0x270 [ 3361.466556][T21207] ? mem_cgroup_margin+0x130/0x130 [ 3361.471724][T21207] ? lock_downgrade+0x690/0x690 [ 3361.476643][T21207] try_charge_memcg+0xf9b/0x13b0 [ 3361.481636][T21207] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3361.487655][T21207] ? rcu_read_unlock+0x9/0x60 [ 3361.492373][T21207] ? lock_downgrade+0x690/0x690 [ 3361.497310][T21207] charge_memcg+0x90/0x3b0 [ 3361.501765][T21207] __mem_cgroup_charge+0x2b/0x90 [ 3361.506742][T21207] do_wp_page+0x8eb/0x3520 [ 3361.511228][T21207] ? lock_release+0x670/0x670 [ 3361.515938][T21207] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3361.521354][T21207] ? do_raw_spin_lock+0x124/0x2b0 [ 3361.526424][T21207] ? spin_bug+0x1c0/0x1c0 [ 3361.530798][T21207] ? lock_downgrade+0x690/0x690 [ 3361.535709][T21207] __handle_mm_fault+0x19a1/0x3e60 [ 3361.540869][T21207] ? vm_iomap_memory+0x190/0x190 [ 3361.545870][T21207] handle_mm_fault+0x2ba/0x9c0 [ 3361.550687][T21207] do_user_addr_fault+0x475/0x1230 [ 3361.555846][T21207] ? rcu_is_watching+0x12/0xb0 [ 3361.560653][T21207] exc_page_fault+0x98/0x170 [ 3361.565294][T21207] asm_exc_page_fault+0x26/0x30 [ 3361.570196][T21207] RIP: 0033:0x7f9ac6239610 [ 3361.574661][T21207] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3361.594316][T21207] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3361.600412][T21207] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3361.608410][T21207] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3361.616405][T21207] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3361.624403][T21207] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3361.632437][T21207] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3361.640441][T21207] ? __x64_sys_socket+0x11/0xb0 [ 3361.645367][T21207] [ 3361.676226][T21207] memory: usage 307200kB, limit 307200kB, failcnt 71998 [ 3361.692115][T21207] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3361.704313][T21207] Memory cgroup stats for /syz2: [ 3361.704587][T21207] anon 98304 [ 3361.704587][T21207] file 364544 [ 3361.704587][T21207] kernel 314093568 [ 3361.704587][T21207] kernel_stack 65536 [ 3361.704587][T21207] pagetables 69632 [ 3361.704587][T21207] sec_pagetables 0 [ 3361.704587][T21207] percpu 5428704 [ 3361.704587][T21207] sock 0 [ 3361.704587][T21207] vmalloc 0 [ 3361.704587][T21207] shmem 348160 [ 3361.704587][T21207] zswap 0 [ 3361.704587][T21207] zswapped 0 [ 3361.704587][T21207] file_mapped 311296 [ 3361.704587][T21207] file_dirty 8192 [ 3361.704587][T21207] file_writeback 0 [ 3361.704587][T21207] swapcached 0 [ 3361.704587][T21207] anon_thp 0 [ 3361.704587][T21207] file_thp 0 [ 3361.704587][T21207] shmem_thp 0 [ 3361.704587][T21207] inactive_anon 413696 [ 3361.704587][T21207] active_anon 32768 [ 3361.704587][T21207] inactive_file 12288 [ 3361.704587][T21207] active_file 4096 [ 3361.704587][T21207] unevictable 0 [ 3361.704587][T21207] slab_reclaimable 218152 [ 3361.704587][T21207] slab_unreclaimable 308288848 [ 3361.704587][T21207] slab 308507000 [ 3361.704587][T21207] workingset_refault_anon 0 [ 3361.704587][T21207] workingset_refault_file 0 [ 3361.704587][T21207] workingset_activate_anon 0 [ 3361.704587][T21207] workingset_activate_file 0 [ 3361.704587][T21207] workingset_restore_anon 0 [ 3361.704587][T21207] workingset_restore_file 0 [ 3361.704587][T21207] workingset_nodereclaim 0 [ 3361.704587][T21207] pgscan 55307 [ 3361.704587][T21207] pgsteal 466 [ 3361.704587][T21207] pgscan_kswapd 0 [ 3361.704587][T21207] pgscan_direct 55307 [ 3361.704587][T21207] pgscan_khugepaged 0 [ 3361.704587][T21207] pgsteal_kswapd 0 [ 3361.704587][T21207] pgsteal_direct 466 [ 3361.704587][T21207] pgsteal_khugepaged 0 [ 3361.704587][T21207] pgfault 421964 [ 3361.704587][T21207] pgmajfault 1 [ 3361.704587][T21207] pgrefill 184695 [ 3361.704587][T21207] pgactivate 54802 [ 3361.704587][T21207] pgdeactivate 0 [ 3361.704587][T21207] pglazyfree 0 [ 3361.704587][T21207] pglazyfreed 0 [ 3361.704587][T21207] zswpin 0 [ 3361.704587][T21207] zswpout 0 [ 3361.895530][T21207] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21207,uid=0 [ 3361.911812][T21207] Memory cgroup out of memory: Killed process 21207 (syz-executor.2) total-vm:54548kB, anon-rss:456kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3361.932944][T21205] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3361.947088][T21205] CPU: 1 PID: 21205 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3361.957593][T21205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3361.967851][T21205] Call Trace: [ 3361.971181][T21205] [ 3361.974167][T21205] dump_stack_lvl+0x136/0x150 [ 3361.978910][T21205] dump_header+0x10a/0xd70 [ 3361.983402][T21205] oom_kill_process+0x25d/0x600 [ 3361.988332][T21205] out_of_memory+0x35c/0x1660 [ 3361.993102][T21205] ? oom_killer_disable+0x2b0/0x2b0 [ 3361.998382][T21205] ? rcu_read_unlock+0x9/0x60 [ 3362.003142][T21205] ? find_held_lock+0x2d/0x110 [ 3362.007996][T21205] mem_cgroup_out_of_memory+0x206/0x270 [ 3362.013714][T21205] ? mem_cgroup_margin+0x130/0x130 [ 3362.018914][T21205] ? lock_downgrade+0x690/0x690 08:19:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4a510300) [ 3362.023853][T21205] try_charge_memcg+0xf9b/0x13b0 [ 3362.028956][T21205] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3362.035009][T21205] ? rcu_read_unlock+0x9/0x60 [ 3362.039767][T21205] ? lock_downgrade+0x690/0x690 [ 3362.044709][T21205] charge_memcg+0x90/0x3b0 [ 3362.049190][T21205] __mem_cgroup_charge+0x2b/0x90 [ 3362.054203][T21205] do_wp_page+0x8eb/0x3520 [ 3362.058706][T21205] ? lock_release+0x670/0x670 [ 3362.063549][T21205] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3362.069001][T21205] ? do_raw_spin_lock+0x124/0x2b0 [ 3362.074114][T21205] ? spin_bug+0x1c0/0x1c0 [ 3362.078552][T21205] ? lock_downgrade+0x690/0x690 [ 3362.083574][T21205] __handle_mm_fault+0x19a1/0x3e60 [ 3362.088784][T21205] ? vm_iomap_memory+0x190/0x190 [ 3362.093826][T21205] handle_mm_fault+0x2ba/0x9c0 [ 3362.098673][T21205] do_user_addr_fault+0x475/0x1230 [ 3362.103863][T21205] ? rcu_is_watching+0x12/0xb0 [ 3362.108705][T21205] exc_page_fault+0x98/0x170 [ 3362.113362][T21205] asm_exc_page_fault+0x26/0x30 [ 3362.118290][T21205] RIP: 0033:0x7f0e44a39610 [ 3362.122762][T21205] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3362.142460][T21205] RSP: 002b:00007ffc44a97870 EFLAGS: 00010246 [ 3362.148584][T21205] RAX: 00000000388b9d9b RBX: 00007f0e44bac018 RCX: 0000001b2ce20000 [ 3362.156612][T21205] RDX: 0000000000000000 RSI: 0000001b2ce20018 RDI: 000000000c7c2369 [ 3362.164630][T21205] RBP: 00000000388b9d9b R08: 0000000000001d9b R09: 00000000388b9d9f [ 3362.172670][T21205] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 00007f0e44ba0000 [ 3362.180711][T21205] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff87f9a562 [ 3362.188744][T21205] ? __sock_create+0x62/0x850 [ 3362.193502][T21205] [ 3362.206287][T21205] memory: usage 307200kB, limit 307200kB, failcnt 75057 [ 3362.217196][T21205] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3362.226049][T21205] Memory cgroup stats for /syz5: [ 3362.226361][T21205] anon 110592 [ 3362.226361][T21205] file 348160 [ 3362.226361][T21205] kernel 314081280 [ 3362.226361][T21205] kernel_stack 32768 [ 3362.226361][T21205] pagetables 73728 [ 3362.226361][T21205] sec_pagetables 0 [ 3362.226361][T21205] percpu 5432688 [ 3362.226361][T21205] sock 0 [ 3362.226361][T21205] vmalloc 20480 [ 3362.226361][T21205] shmem 344064 [ 3362.226361][T21205] zswap 0 [ 3362.226361][T21205] zswapped 0 [ 3362.226361][T21205] file_mapped 327680 [ 3362.226361][T21205] file_dirty 0 [ 3362.226361][T21205] file_writeback 0 [ 3362.226361][T21205] swapcached 0 [ 3362.226361][T21205] anon_thp 0 [ 3362.226361][T21205] file_thp 0 [ 3362.226361][T21205] shmem_thp 0 [ 3362.226361][T21205] inactive_anon 40960 [ 3362.226361][T21205] active_anon 413696 [ 3362.226361][T21205] inactive_file 4096 [ 3362.226361][T21205] active_file 0 [ 3362.226361][T21205] unevictable 0 [ 3362.226361][T21205] slab_reclaimable 14160 [ 3362.226361][T21205] slab_unreclaimable 308476352 [ 3362.226361][T21205] slab 308490512 [ 3362.226361][T21205] workingset_refault_anon 0 [ 3362.226361][T21205] workingset_refault_file 1 [ 3362.226361][T21205] workingset_activate_anon 0 [ 3362.226361][T21205] workingset_activate_file 0 [ 3362.226361][T21205] workingset_restore_anon 0 [ 3362.226361][T21205] workingset_restore_file 0 [ 3362.226361][T21205] workingset_nodereclaim 0 [ 3362.226361][T21205] pgscan 43413 [ 3362.226361][T21205] pgsteal 459 [ 3362.226361][T21205] pgscan_kswapd 0 [ 3362.226361][T21205] pgscan_direct 43413 [ 3362.226361][T21205] pgscan_khugepaged 0 [ 3362.226361][T21205] pgsteal_kswapd 0 [ 3362.226361][T21205] pgsteal_direct 459 [ 3362.226361][T21205] pgsteal_khugepaged 0 [ 3362.226361][T21205] pgfault 412313 [ 3362.226361][T21205] pgmajfault 0 [ 3362.226361][T21205] pgrefill 143856 [ 3362.226361][T21205] pgactivate 42939 [ 3362.226361][T21205] pgdeactivate 0 [ 3362.226361][T21205] pglazyfree 0 [ 3362.226361][T21205] pglazyfreed 0 [ 3362.226361][T21205] zswpin 0 [ 3362.226361][T21205] zswpout 0 08:19:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900100001000070400"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x190}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="900100001000070400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028008001d00000000000a000200aaaaaaaaaaaa0000480118802c00018005000600050000000b00020062726964676500000b000200b0e2407930addb57d81c62726964676500000500060005000000300001800563060005000000050002000000000014000500a3f6182e043ee4287cd3ce2bc880e55205000600de0000002c00018005000600050000000b00020062726964676500001400040004e99f01dfe4121e685ea14c95f6a0c2240001801400050020b88f1eee05a1444f3c01c255a0f76b0b00020062726964676500007800018014000400c7900fe63ae043ea43b50c9cadb5c9f0080001001f00000014000500a53c959e116c398837c34bd2b68394560b100200627269646765000005000600080000001400040085a232505bd2f0be44864568df50cb2a08000100080000000b00020062726964676500000800010000018005000600060000001400040045f11e2eaf8d0000000000"], 0x190}}, 0x0) [ 3362.418247][T21205] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21205,uid=0 [ 3362.459431][T21205] Memory cgroup out of memory: Killed process 21205 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3362.480430][T21214] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3362.497116][T21214] CPU: 0 PID: 21214 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3362.507612][T21214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3362.517810][T21214] Call Trace: [ 3362.521131][T21214] [ 3362.524104][T21214] dump_stack_lvl+0x136/0x150 [ 3362.528844][T21214] dump_header+0x10a/0xd70 [ 3362.533334][T21214] oom_kill_process+0x25d/0x600 [ 3362.538245][T21214] out_of_memory+0x35c/0x1660 [ 3362.542961][T21214] ? oom_killer_disable+0x2b0/0x2b0 [ 3362.548206][T21214] ? rcu_read_unlock+0x9/0x60 [ 3362.552960][T21214] ? find_held_lock+0x2d/0x110 [ 3362.557790][T21214] mem_cgroup_out_of_memory+0x206/0x270 [ 3362.563383][T21214] ? mem_cgroup_margin+0x130/0x130 [ 3362.568548][T21214] ? lock_downgrade+0x690/0x690 [ 3362.573469][T21214] try_charge_memcg+0xf9b/0x13b0 [ 3362.578644][T21214] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3362.584690][T21214] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3362.590488][T21214] ? lock_downgrade+0x690/0x690 [ 3362.595391][T21214] ? lock_downgrade+0x690/0x690 [ 3362.600349][T21214] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3362.605938][T21214] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3362.612241][T21214] copy_process+0x4e3/0x7590 [ 3362.616864][T21214] ? folio_flags.constprop.0+0x53/0x150 [ 3362.622451][T21214] ? free_swap_cache+0x1b5/0x3d0 [ 3362.627438][T21214] ? do_wp_page+0x4be/0x3520 [ 3362.632074][T21214] ? __cleanup_sighand+0xb0/0xb0 [ 3362.637056][T21214] ? spin_bug+0x1c0/0x1c0 [ 3362.641414][T21214] ? lock_downgrade+0x690/0x690 [ 3362.646309][T21214] kernel_clone+0xeb/0x890 [ 3362.650792][T21214] ? create_io_thread+0xf0/0xf0 [ 3362.655678][T21214] ? vm_iomap_memory+0x190/0x190 [ 3362.660669][T21214] ? find_held_lock+0x2d/0x110 [ 3362.665494][T21214] __do_sys_clone+0xba/0x100 [ 3362.670123][T21214] ? kernel_clone+0x890/0x890 [ 3362.674863][T21214] ? syscall_enter_from_user_mode+0x26/0x80 [ 3362.680829][T21214] do_syscall_64+0x39/0xb0 [ 3362.685299][T21214] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3362.691329][T21214] RIP: 0033:0x7f461ea8d591 [ 3362.695770][T21214] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3362.715506][T21214] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3362.723973][T21214] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3362.731980][T21214] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3362.739980][T21214] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3362.747978][T21214] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3362.755976][T21214] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3362.764118][T21214] [ 3362.779737][T21214] memory: usage 307200kB, limit 307200kB, failcnt 82873 [ 3362.787562][T21214] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3362.801904][T21214] Memory cgroup stats for /syz3: [ 3362.802189][T21214] anon 86016 [ 3362.802189][T21214] file 352256 [ 3362.802189][T21214] kernel 314118144 [ 3362.802189][T21214] kernel_stack 32768 [ 3362.802189][T21214] pagetables 69632 [ 3362.802189][T21214] sec_pagetables 0 [ 3362.802189][T21214] percpu 5432256 [ 3362.802189][T21214] sock 0 [ 3362.802189][T21214] vmalloc 8192 [ 3362.802189][T21214] shmem 339968 [ 3362.802189][T21214] zswap 0 [ 3362.802189][T21214] zswapped 0 [ 3362.802189][T21214] file_mapped 327680 [ 3362.802189][T21214] file_dirty 8192 [ 3362.802189][T21214] file_writeback 0 [ 3362.802189][T21214] swapcached 0 [ 3362.802189][T21214] anon_thp 0 [ 3362.802189][T21214] file_thp 0 [ 3362.802189][T21214] shmem_thp 0 [ 3362.802189][T21214] inactive_anon 380928 [ 3362.802189][T21214] active_anon 45056 [ 3362.802189][T21214] inactive_file 8192 [ 3362.802189][T21214] active_file 4096 [ 3362.802189][T21214] unevictable 0 [ 3362.802189][T21214] slab_reclaimable 36464 [ 3362.802189][T21214] slab_unreclaimable 308482544 [ 3362.802189][T21214] slab 308519008 [ 3362.802189][T21214] workingset_refault_anon 0 [ 3362.802189][T21214] workingset_refault_file 2 [ 3362.802189][T21214] workingset_activate_anon 0 [ 3362.802189][T21214] workingset_activate_file 0 [ 3362.802189][T21214] workingset_restore_anon 0 [ 3362.802189][T21214] workingset_restore_file 0 [ 3362.802189][T21214] workingset_nodereclaim 0 [ 3362.802189][T21214] pgscan 56362 [ 3362.802189][T21214] pgsteal 460 [ 3362.802189][T21214] pgscan_kswapd 0 [ 3362.802189][T21214] pgscan_direct 56362 [ 3362.802189][T21214] pgscan_khugepaged 0 [ 3362.802189][T21214] pgsteal_kswapd 0 [ 3362.802189][T21214] pgsteal_direct 460 [ 3362.802189][T21214] pgsteal_khugepaged 0 [ 3362.802189][T21214] pgfault 416304 [ 3362.802189][T21214] pgmajfault 1 [ 3362.802189][T21214] pgrefill 215346 [ 3362.802189][T21214] pgactivate 55893 [ 3362.802189][T21214] pgdeactivate 0 [ 3362.802189][T21214] pglazyfree 0 [ 3362.802189][T21214] pglazyfreed 0 [ 3362.802189][T21214] zswpin 0 [ 3362.802189][T21214] zswpout 0 08:19:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd853030000000000) [ 3362.998503][T21214] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21214,uid=0 08:19:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xde4b0300) [ 3363.055979][T21214] Memory cgroup out of memory: Killed process 21214 (syz-executor.3) total-vm:50708kB, anon-rss:416kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r2, 0x0, 0x4ff9c, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getaddr={0x14, 0x16, 0x4, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x400c1}, 0x20004002) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3363.140484][T21216] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3363.175847][T21216] CPU: 1 PID: 21216 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3363.186367][T21216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3363.196553][T21216] Call Trace: [ 3363.199864][T21216] [ 3363.202819][T21216] dump_stack_lvl+0x136/0x150 [ 3363.207532][T21216] dump_header+0x10a/0xd70 [ 3363.211989][T21216] oom_kill_process+0x25d/0x600 [ 3363.216882][T21216] out_of_memory+0x35c/0x1660 [ 3363.221638][T21216] ? find_held_lock+0x2d/0x110 [ 3363.226452][T21216] ? oom_killer_disable+0x2b0/0x2b0 [ 3363.231692][T21216] ? rcu_read_unlock+0x9/0x60 [ 3363.236411][T21216] ? find_held_lock+0x2d/0x110 [ 3363.241229][T21216] mem_cgroup_out_of_memory+0x206/0x270 [ 3363.246968][T21216] ? mem_cgroup_margin+0x130/0x130 [ 3363.252120][T21216] ? lock_downgrade+0x690/0x690 [ 3363.257027][T21216] try_charge_memcg+0xf9b/0x13b0 [ 3363.262001][T21216] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3363.268020][T21216] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3363.273787][T21216] ? lock_downgrade+0x690/0x690 [ 3363.278677][T21216] ? lock_downgrade+0x690/0x690 [ 3363.283577][T21216] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3363.289158][T21216] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3363.295354][T21216] copy_process+0x4e3/0x7590 [ 3363.299985][T21216] ? __lock_acquire+0xbc5/0x5d40 [ 3363.304971][T21216] ? __cleanup_sighand+0xb0/0xb0 [ 3363.309953][T21216] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3363.315975][T21216] ? psi_memstall_leave+0x174/0x250 [ 3363.321301][T21216] ? lock_downgrade+0x690/0x690 [ 3363.326193][T21216] kernel_clone+0xeb/0x890 [ 3363.330647][T21216] ? create_io_thread+0xf0/0xf0 [ 3363.335547][T21216] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3363.341838][T21216] ? lock_downgrade+0x690/0x690 [ 3363.346771][T21216] __do_sys_clone+0xba/0x100 [ 3363.351399][T21216] ? kernel_clone+0x890/0x890 [ 3363.356128][T21216] ? syscall_enter_from_user_mode+0x26/0x80 [ 3363.362067][T21216] do_syscall_64+0x39/0xb0 [ 3363.366533][T21216] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.372520][T21216] RIP: 0033:0x7faa0ba8d591 [ 3363.376963][T21216] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3363.396602][T21216] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3363.405046][T21216] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3363.413054][T21216] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3363.421050][T21216] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3363.429048][T21216] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3363.437051][T21216] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3363.445073][T21216] [ 3363.492613][T21216] memory: usage 307184kB, limit 307200kB, failcnt 95681 [ 3363.506812][T21216] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3363.514344][T21216] Memory cgroup stats for /syz1: [ 3363.514619][T21216] anon 102400 [ 3363.514619][T21216] file 356352 [ 3363.514619][T21216] kernel 314097664 [ 3363.514619][T21216] kernel_stack 65536 [ 3363.514619][T21216] pagetables 81920 [ 3363.514619][T21216] sec_pagetables 0 [ 3363.514619][T21216] percpu 5423968 [ 3363.514619][T21216] sock 0 [ 3363.514619][T21216] vmalloc 24576 [ 3363.514619][T21216] shmem 339968 [ 3363.514619][T21216] zswap 0 [ 3363.514619][T21216] zswapped 0 [ 3363.514619][T21216] file_mapped 262144 [ 3363.514619][T21216] file_dirty 12288 [ 3363.514619][T21216] file_writeback 0 [ 3363.514619][T21216] swapcached 0 [ 3363.514619][T21216] anon_thp 0 [ 3363.514619][T21216] file_thp 0 [ 3363.514619][T21216] shmem_thp 0 [ 3363.514619][T21216] inactive_anon 36864 [ 3363.514619][T21216] active_anon 405504 [ 3363.514619][T21216] inactive_file 0 [ 3363.514619][T21216] active_file 16384 [ 3363.514619][T21216] unevictable 0 [ 3363.514619][T21216] slab_reclaimable 245608 [ 3363.514619][T21216] slab_unreclaimable 308226616 [ 3363.514619][T21216] slab 308472224 [ 3363.514619][T21216] workingset_refault_anon 0 [ 3363.514619][T21216] workingset_refault_file 4 [ 3363.514619][T21216] workingset_activate_anon 0 [ 3363.514619][T21216] workingset_activate_file 0 [ 3363.514619][T21216] workingset_restore_anon 0 [ 3363.514619][T21216] workingset_restore_file 2 [ 3363.514619][T21216] workingset_nodereclaim 0 [ 3363.514619][T21216] pgscan 80113 [ 3363.514619][T21216] pgsteal 605 [ 3363.514619][T21216] pgscan_kswapd 0 [ 3363.514619][T21216] pgscan_direct 80113 [ 3363.514619][T21216] pgscan_khugepaged 0 [ 3363.514619][T21216] pgsteal_kswapd 0 [ 3363.514619][T21216] pgsteal_direct 605 [ 3363.514619][T21216] pgsteal_khugepaged 0 [ 3363.514619][T21216] pgfault 410323 [ 3363.514619][T21216] pgmajfault 0 [ 3363.514619][T21216] pgrefill 218023 [ 3363.514619][T21216] pgactivate 79415 [ 3363.514619][T21216] pgdeactivate 0 [ 3363.514619][T21216] pglazyfree 0 [ 3363.514619][T21216] pglazyfreed 0 [ 3363.514619][T21216] zswpin 0 [ 3363.514619][T21216] zswpout 0 [ 3363.707114][T21216] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21216,uid=0 [ 3363.722887][T21216] Memory cgroup out of memory: Killed process 21216 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3363.743324][T21217] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3363.770123][T21217] CPU: 0 PID: 21217 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3363.780716][T21217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3363.790824][T21217] Call Trace: [ 3363.794165][T21217] [ 3363.797143][T21217] dump_stack_lvl+0x136/0x150 [ 3363.801885][T21217] dump_header+0x10a/0xd70 [ 3363.806378][T21217] oom_kill_process+0x25d/0x600 [ 3363.811306][T21217] out_of_memory+0x35c/0x1660 [ 3363.816065][T21217] ? oom_killer_disable+0x2b0/0x2b0 [ 3363.821342][T21217] ? rcu_read_unlock+0x9/0x60 [ 3363.826082][T21217] ? find_held_lock+0x2d/0x110 [ 3363.830935][T21217] mem_cgroup_out_of_memory+0x206/0x270 [ 3363.836557][T21217] ? mem_cgroup_margin+0x130/0x130 08:19:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x20000000000000) [ 3363.841742][T21217] ? lock_downgrade+0x690/0x690 [ 3363.846693][T21217] try_charge_memcg+0xf9b/0x13b0 [ 3363.851703][T21217] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3363.857740][T21217] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3363.863546][T21217] ? lock_downgrade+0x690/0x690 [ 3363.868559][T21217] ? lock_downgrade+0x690/0x690 [ 3363.873490][T21217] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3363.879112][T21217] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3363.885365][T21217] copy_process+0x13a7/0x7590 [ 3363.890108][T21217] ? __lock_acquire+0xbc5/0x5d40 [ 3363.895409][T21217] ? __cleanup_sighand+0xb0/0xb0 [ 3363.900410][T21217] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3363.906464][T21217] ? psi_memstall_leave+0x174/0x250 [ 3363.911729][T21217] ? lock_downgrade+0x690/0x690 [ 3363.916657][T21217] kernel_clone+0xeb/0x890 [ 3363.921152][T21217] ? create_io_thread+0xf0/0xf0 [ 3363.926091][T21217] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3363.932413][T21217] ? lock_downgrade+0x690/0x690 [ 3363.937357][T21217] __do_sys_clone+0xba/0x100 [ 3363.942020][T21217] ? kernel_clone+0x890/0x890 [ 3363.946782][T21217] ? syscall_enter_from_user_mode+0x26/0x80 [ 3363.952768][T21217] do_syscall_64+0x39/0xb0 [ 3363.957285][T21217] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3363.963266][T21217] RIP: 0033:0x7f79ea88d591 [ 3363.967749][T21217] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3363.987583][T21217] RSP: 002b:00007ffd939e5c88 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3363.996145][T21217] RAX: ffffffffffffffda RBX: 00007f79e93fe700 RCX: 00007f79ea88d591 [ 3364.004263][T21217] RDX: 00007f79e93fe9d0 RSI: 00007f79e93fe2f0 RDI: 00000000003d0f00 [ 3364.012308][T21217] RBP: 00007ffd939e5ed0 R08: 00007f79e93fe700 R09: 00007f79e93fe700 [ 3364.020355][T21217] R10: 00007f79e93fe9d0 R11: 0000000000000206 R12: 00007ffd939e5d3e [ 3364.028387][T21217] R13: 00007ffd939e5d3f R14: 00007f79e93fe300 R15: 0000000000022000 [ 3364.036432][T21217] [ 3364.068735][T21217] memory: usage 307200kB, limit 307200kB, failcnt 78631 [ 3364.075988][T21217] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3364.083701][T21217] Memory cgroup stats for /syz4: [ 3364.083973][T21217] anon 106496 [ 3364.083973][T21217] file 319488 [ 3364.083973][T21217] kernel 314146816 [ 3364.083973][T21217] kernel_stack 65536 [ 3364.083973][T21217] pagetables 81920 [ 3364.083973][T21217] sec_pagetables 0 [ 3364.083973][T21217] percpu 5432256 [ 3364.083973][T21217] sock 0 [ 3364.083973][T21217] vmalloc 0 [ 3364.083973][T21217] shmem 311296 [ 3364.083973][T21217] zswap 0 [ 3364.083973][T21217] zswapped 0 [ 3364.083973][T21217] file_mapped 311296 [ 3364.083973][T21217] file_dirty 4096 [ 3364.083973][T21217] file_writeback 0 [ 3364.083973][T21217] swapcached 0 [ 3364.083973][T21217] anon_thp 0 [ 3364.083973][T21217] file_thp 0 [ 3364.083973][T21217] shmem_thp 0 [ 3364.083973][T21217] inactive_anon 36864 [ 3364.083973][T21217] active_anon 380928 [ 3364.083973][T21217] inactive_file 8192 [ 3364.083973][T21217] active_file 0 [ 3364.083973][T21217] unevictable 0 [ 3364.083973][T21217] slab_reclaimable 16920 [ 3364.083973][T21217] slab_unreclaimable 308495296 [ 3364.083973][T21217] slab 308512216 [ 3364.083973][T21217] workingset_refault_anon 0 [ 3364.083973][T21217] workingset_refault_file 0 [ 3364.083973][T21217] workingset_activate_anon 0 [ 3364.083973][T21217] workingset_activate_file 0 [ 3364.083973][T21217] workingset_restore_anon 0 [ 3364.083973][T21217] workingset_restore_file 0 [ 3364.083973][T21217] workingset_nodereclaim 0 [ 3364.083973][T21217] pgscan 50825 [ 3364.083973][T21217] pgsteal 494 [ 3364.083973][T21217] pgscan_kswapd 0 [ 3364.083973][T21217] pgscan_direct 50825 [ 3364.083973][T21217] pgscan_khugepaged 0 [ 3364.083973][T21217] pgsteal_kswapd 0 [ 3364.083973][T21217] pgsteal_direct 494 [ 3364.083973][T21217] pgsteal_khugepaged 0 [ 3364.083973][T21217] pgfault 405292 [ 3364.083973][T21217] pgmajfault 1 [ 3364.083973][T21217] pgrefill 140655 [ 3364.083973][T21217] pgactivate 50270 [ 3364.083973][T21217] pgdeactivate 0 [ 3364.083973][T21217] pglazyfree 0 [ 3364.083973][T21217] pglazyfreed 0 [ 3364.083973][T21217] zswpin 0 [ 3364.083973][T21217] zswpout 0 [ 3364.274635][T21217] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21217,uid=0 [ 3364.294222][T21217] Memory cgroup out of memory: Killed process 21217 (syz-executor.4) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 08:19:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xd953030000000000) [ 3364.326697][T21224] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3364.348247][T21224] CPU: 1 PID: 21224 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3364.359019][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3364.369164][T21224] Call Trace: [ 3364.372492][T21224] [ 3364.375479][T21224] dump_stack_lvl+0x136/0x150 [ 3364.380225][T21224] dump_header+0x10a/0xd70 [ 3364.384720][T21224] oom_kill_process+0x25d/0x600 [ 3364.389654][T21224] out_of_memory+0x35c/0x1660 [ 3364.394417][T21224] ? oom_killer_disable+0x2b0/0x2b0 [ 3364.399690][T21224] ? rcu_read_unlock+0x9/0x60 [ 3364.404414][T21224] ? find_held_lock+0x2d/0x110 [ 3364.409241][T21224] mem_cgroup_out_of_memory+0x206/0x270 [ 3364.415132][T21224] ? mem_cgroup_margin+0x130/0x130 [ 3364.420314][T21224] ? lock_downgrade+0x690/0x690 [ 3364.425225][T21224] try_charge_memcg+0xf9b/0x13b0 [ 3364.430215][T21224] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3364.436252][T21224] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3364.442031][T21224] ? lock_downgrade+0x690/0x690 [ 3364.446926][T21224] ? lock_downgrade+0x690/0x690 [ 3364.452031][T21224] obj_cgroup_charge+0x2af/0x5e0 [ 3364.457013][T21224] ? sock_alloc_inode+0x27/0x1d0 [ 3364.462000][T21224] kmem_cache_alloc_lru+0x142/0x600 [ 3364.467256][T21224] sock_alloc_inode+0x27/0x1d0 [ 3364.472060][T21224] ? sock_free_inode+0x30/0x30 [ 3364.476866][T21224] alloc_inode+0x61/0x230 [ 3364.481322][T21224] new_inode_pseudo+0x17/0x80 [ 3364.486043][T21224] sock_alloc+0x40/0x270 [ 3364.490330][T21224] __sock_create+0xbd/0x850 [ 3364.494883][T21224] __sys_socket+0x133/0x250 [ 3364.499519][T21224] ? __sys_socket_file+0x1d0/0x1d0 [ 3364.504675][T21224] ? kcov_ioctl+0x384/0x6f0 [ 3364.509221][T21224] __x64_sys_socket+0x73/0xb0 [ 3364.513989][T21224] do_syscall_64+0x39/0xb0 [ 3364.518457][T21224] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3364.524404][T21224] RIP: 0033:0x7f0e44a8c169 [ 3364.528852][T21224] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3364.548583][T21224] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3364.557041][T21224] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3364.565126][T21224] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 08:19:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0xe0, 0x24, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xffff, 0x6}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x8, 0x9, 0x2, 0x7ff, 0x7d, 0x1}}, {0x6, 0x2, [0x21]}}, {{0xffffffffffffff8f, 0x1, {0xd1, 0x0, 0x0, 0xffffffff, 0x1, 0x8, 0xffffff00, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x2, 0x0, 0x13a, 0x1, 0x3d]}}, {{0x1c, 0x1, {0x7, 0x9f, 0x6, 0x8, 0x0, 0x8, 0x3ff, 0x8}}, {0x14, 0x2, [0x6, 0x80, 0x1, 0x3, 0x81, 0x400, 0x80, 0x44b]}}, {{0x1c, 0x1, {0x9, 0x20, 0x3, 0x9d4f, 0x1, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0x81]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) [ 3364.573227][T21224] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3364.581228][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3364.589223][T21224] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3364.597241][T21224] [ 3364.713674][T21224] memory: usage 307184kB, limit 307200kB, failcnt 75197 [ 3364.738708][T21224] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3364.745916][T21224] Memory cgroup stats for /syz5: [ 3364.746197][T21224] anon 94208 [ 3364.746197][T21224] file 352256 [ 3364.746197][T21224] kernel 314109952 [ 3364.746197][T21224] kernel_stack 65536 [ 3364.746197][T21224] pagetables 73728 [ 3364.746197][T21224] sec_pagetables 0 [ 3364.746197][T21224] percpu 5432688 [ 3364.746197][T21224] sock 0 [ 3364.746197][T21224] vmalloc 20480 [ 3364.746197][T21224] shmem 344064 [ 3364.746197][T21224] zswap 0 [ 3364.746197][T21224] zswapped 0 [ 3364.746197][T21224] file_mapped 327680 [ 3364.746197][T21224] file_dirty 0 [ 3364.746197][T21224] file_writeback 0 [ 3364.746197][T21224] swapcached 0 [ 3364.746197][T21224] anon_thp 0 [ 3364.746197][T21224] file_thp 0 [ 3364.746197][T21224] shmem_thp 0 [ 3364.746197][T21224] inactive_anon 40960 [ 3364.746197][T21224] active_anon 397312 [ 3364.746197][T21224] inactive_file 4096 [ 3364.746197][T21224] active_file 4096 [ 3364.746197][T21224] unevictable 0 [ 3364.746197][T21224] slab_reclaimable 12472 [ 3364.746197][T21224] slab_unreclaimable 308475704 [ 3364.746197][T21224] slab 308488176 [ 3364.746197][T21224] workingset_refault_anon 0 [ 3364.746197][T21224] workingset_refault_file 1 [ 3364.746197][T21224] workingset_activate_anon 0 [ 3364.746197][T21224] workingset_activate_file 0 [ 3364.746197][T21224] workingset_restore_anon 0 [ 3364.746197][T21224] workingset_restore_file 0 [ 3364.746197][T21224] workingset_nodereclaim 0 [ 3364.746197][T21224] pgscan 43506 [ 3364.746197][T21224] pgsteal 459 [ 3364.746197][T21224] pgscan_kswapd 0 [ 3364.746197][T21224] pgscan_direct 43506 [ 3364.746197][T21224] pgscan_khugepaged 0 [ 3364.746197][T21224] pgsteal_kswapd 0 [ 3364.746197][T21224] pgsteal_direct 459 [ 3364.746197][T21224] pgsteal_khugepaged 0 [ 3364.746197][T21224] pgfault 412357 [ 3364.746197][T21224] pgmajfault 0 [ 3364.746197][T21224] pgrefill 143856 [ 3364.746197][T21224] pgactivate 43032 [ 3364.746197][T21224] pgdeactivate 0 [ 3364.746197][T21224] pglazyfree 0 [ 3364.746197][T21224] pglazyfreed 0 [ 3364.746197][T21224] zswpin 0 [ 3364.746197][T21224] zswpout 0 [ 3364.935720][T21224] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21221,uid=0 08:19:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdf4b0300) [ 3364.955648][T21224] Memory cgroup out of memory: Killed process 21221 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3364.976058][T21223] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3365.009232][T21223] CPU: 0 PID: 21223 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3365.019746][T21223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3365.029855][T21223] Call Trace: [ 3365.033179][T21223] [ 3365.036243][T21223] dump_stack_lvl+0x136/0x150 [ 3365.040996][T21223] dump_header+0x10a/0xd70 [ 3365.045474][T21223] oom_kill_process+0x25d/0x600 [ 3365.050391][T21223] out_of_memory+0x35c/0x1660 [ 3365.055149][T21223] ? oom_killer_disable+0x2b0/0x2b0 [ 3365.060426][T21223] ? rcu_read_unlock+0x9/0x60 [ 3365.065219][T21223] ? find_held_lock+0x2d/0x110 [ 3365.070075][T21223] mem_cgroup_out_of_memory+0x206/0x270 [ 3365.075703][T21223] ? mem_cgroup_margin+0x130/0x130 [ 3365.080884][T21223] ? lock_downgrade+0x690/0x690 [ 3365.085818][T21223] try_charge_memcg+0xf9b/0x13b0 [ 3365.090826][T21223] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3365.096957][T21223] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3365.102754][T21223] ? lock_downgrade+0x690/0x690 [ 3365.107768][T21223] ? lock_downgrade+0x690/0x690 [ 3365.112778][T21223] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3365.118476][T21223] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3365.124723][T21223] copy_process+0x13a7/0x7590 [ 3365.129511][T21223] ? __lock_acquire+0xbc5/0x5d40 [ 3365.134531][T21223] ? __cleanup_sighand+0xb0/0xb0 [ 3365.136456][T21231] syz-executor.0: vmalloc error: size 0, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3365.139600][T21223] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3365.139651][T21223] ? psi_memstall_leave+0x174/0x250 [ 3365.157415][T21231] ,cpuset= [ 3365.163151][T21223] ? lock_downgrade+0x690/0x690 [ 3365.163204][T21223] kernel_clone+0xeb/0x890 [ 3365.180901][T21223] ? create_io_thread+0xf0/0xf0 [ 3365.181221][T21231] syz0 [ 3365.185794][T21223] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3365.185945][T21231] ,mems_allowed=0-1 [ 3365.188521][T21223] ? lock_downgrade+0x690/0x690 [ 3365.188573][T21223] __do_sys_clone+0xba/0x100 [ 3365.194949][T21231] [ 3365.198666][T21223] ? kernel_clone+0x890/0x890 [ 3365.198725][T21223] ? syscall_enter_from_user_mode+0x26/0x80 [ 3365.221452][T21223] do_syscall_64+0x39/0xb0 [ 3365.225939][T21223] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.231888][T21223] RIP: 0033:0x7f461ea8d591 [ 3365.236363][T21223] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3365.256013][T21223] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3365.264464][T21223] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3365.272478][T21223] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3365.280510][T21223] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3365.288521][T21223] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3365.296526][T21223] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3365.304557][T21223] [ 3365.307604][T21231] CPU: 1 PID: 21231 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3365.318088][T21231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3365.327953][T21223] memory: usage 307184kB, limit 307200kB, failcnt 82975 [ 3365.328169][T21231] Call Trace: [ 3365.328183][T21231] [ 3365.328198][T21231] dump_stack_lvl+0x136/0x150 [ 3365.336435][T21223] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3365.338486][T21231] warn_alloc+0x213/0x360 [ 3365.338531][T21231] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3365.338605][T21231] __vmalloc_node_range+0x1021/0x14a0 [ 3365.341769][T21223] Memory cgroup stats for [ 3365.346241][T21231] ? alloc_netdev_mqs+0x9c/0x1250 [ 3365.346302][T21231] ? delayed_vfree_work+0x70/0x70 [ 3365.353438][T21223] /syz3 [ 3365.357482][T21231] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3365.363510][T21223] : [ 3365.368478][T21231] ? kvmalloc_node+0x76/0x1a0 [ 3365.368520][T21231] ? rcu_is_watching+0x12/0xb0 [ 3365.368564][T21231] ? alloc_netdev_mqs+0x9c/0x1250 [ 3365.368603][T21231] kvmalloc_node+0x156/0x1a0 [ 3365.368637][T21231] ? alloc_netdev_mqs+0x9c/0x1250 [ 3365.373544][T21223] anon 86016 [ 3365.373544][T21223] file 356352 [ 3365.373544][T21223] kernel 314114048 [ 3365.373544][T21223] kernel_stack 32768 [ 3365.373544][T21223] pagetables 69632 [ 3365.373544][T21223] sec_pagetables 0 [ 3365.373544][T21223] percpu 5432256 [ 3365.373544][T21223] sock 0 [ 3365.373544][T21223] vmalloc 8192 [ 3365.373544][T21223] shmem 339968 [ 3365.373544][T21223] zswap 0 [ 3365.373544][T21223] zswapped 0 [ 3365.373544][T21223] file_mapped 327680 [ 3365.373544][T21223] file_dirty 12288 [ 3365.373544][T21223] file_writeback 0 [ 3365.373544][T21223] swapcached 0 [ 3365.373544][T21223] anon_thp 0 [ 3365.373544][T21223] file_thp 0 [ 3365.373544][T21223] shmem_thp 0 [ 3365.373544][T21223] inactive_anon 393216 [ 3365.373544][T21223] active_anon 32768 [ 3365.373544][T21223] inactive_file 8192 [ 3365.373544][T21223] active_file 8192 [ 3365.373544][T21223] unevictable 0 [ 3365.373544][T21223] slab_reclaimable 36704 [ 3365.373544][T21223] slab_unreclaimable 308484920 [ 3365.373544][T21223] slab 308521624 [ 3365.373544][T21223] workingset_refault_anon 0 [ 3365.373544][T21223] workingset_refault_file 2 [ 3365.373544][T21223] workingset_activate_anon 0 [ 3365.373544][T21223] workingset_activate_file 0 [ 3365.373544][T21223] workingset_restore_anon 0 [ 3365.373544][T21223] workingset_restore_file 0 [ 3365.373544][T21223] workingset_nodereclaim 0 [ 3365.373544][T21223] pgscan 56402 [ 3365.373544][T21223] pgsteal 460 [ 3365.373544][T21223] pgscan_kswapd 0 [ 3365.373544][T21223] pgscan_direct 56402 [ 3365.373544][T21223] pgscan_khugepaged 0 [ 3365.373544][T21223] pgsteal_kswapd 0 [ 3365.373544][T21223] pgsteal_direct 460 [ 3365.373544][T21223] pgsteal_khugepaged 0 [ 3365.373544][T21223] pgfault 416345 [ 3365.373544][T21223] pgmajfault 1 [ 3365.373544][T21223] pgrefill 215519 [ 3365.373544][T21223] pgactivate 55933 [ 3365.373544][T21223] pgdeactivate 0 [ 3365.373544][T21223] pglazyfree 0 [ 3365.373544][T21223] pglazyfreed 0 [ 3365.373544][T21223] zswpin 0 [ 3365.373544][T21223] zswpout 0 [ 3365.378116][T21231] alloc_netdev_mqs+0x9c/0x1250 [ 3365.378156][T21231] ? security_capable+0x93/0xc0 [ 3365.378188][T21231] ? br_netpoll_disable+0x60/0x60 [ 3365.378232][T21231] rtnl_create_link+0xbeb/0xee0 [ 3365.378278][T21231] __rtnl_newlink+0xfd4/0x1840 [ 3365.378342][T21231] ? rtnl_link_unregister+0x250/0x250 [ 3365.383561][T21223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3365.386142][T21231] ? rtnl_newlink+0x4a/0xa0 [ 3365.386204][T21231] rtnl_newlink+0x68/0xa0 [ 3365.392130][T21223] ,cpuset= [ 3365.394153][T21231] ? __rtnl_newlink+0x1840/0x1840 [ 3365.394206][T21231] rtnetlink_rcv_msg+0x43d/0xd50 08:19:32 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4b510300) [ 3365.394260][T21231] ? rtnl_stats_set+0x4d0/0x4d0 [ 3365.399336][T21223] syz3 [ 3365.403686][T21231] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3365.409148][T21223] ,mems_allowed=0-1 [ 3365.413335][T21231] netlink_rcv_skb+0x165/0x440 [ 3365.413388][T21231] ? rtnl_stats_set+0x4d0/0x4d0 [ 3365.420108][T21223] ,oom_memcg= [ 3365.599744][T21231] ? netlink_ack+0x1360/0x1360 [ 3365.599823][T21231] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3365.599873][T21231] netlink_unicast+0x547/0x7f0 [ 3365.599922][T21231] ? netlink_attachskb+0x890/0x890 [ 3365.599960][T21231] ? __virt_addr_valid+0x61/0x2e0 [ 3365.600008][T21231] ? __phys_addr_symbol+0x30/0x70 [ 3365.600054][T21231] ? __check_object_size+0x333/0x6e0 [ 3365.600100][T21231] netlink_sendmsg+0x925/0xe30 [ 3365.600147][T21231] ? netlink_unicast+0x7f0/0x7f0 [ 3365.600196][T21231] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3365.600236][T21231] ? netlink_unicast+0x7f0/0x7f0 [ 3365.600276][T21231] sock_sendmsg+0xde/0x190 [ 3365.600318][T21231] ____sys_sendmsg+0x71c/0x900 [ 3365.600360][T21231] ? copy_msghdr_from_user+0xfc/0x150 [ 3365.600407][T21231] ? kernel_sendmsg+0x50/0x50 [ 3365.600471][T21231] ? futex_unqueue+0xb7/0x120 [ 3365.600519][T21231] ? futex_wait+0x503/0x680 [ 3365.600571][T21231] ___sys_sendmsg+0x110/0x1b0 [ 3365.600622][T21231] ? do_recvmmsg+0x6e0/0x6e0 [ 3365.600674][T21231] ? __fget_files+0x248/0x480 [ 3365.600721][T21231] ? lock_downgrade+0x690/0x690 [ 3365.600783][T21231] ? __fget_files+0x26a/0x480 [ 3365.600844][T21231] ? __fget_light+0xe5/0x270 [ 3365.600901][T21231] __sys_sendmsg+0xf7/0x1c0 [ 3365.600949][T21231] ? __sys_sendmsg_sock+0x40/0x40 [ 3365.601002][T21231] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3365.601073][T21231] ? syscall_enter_from_user_mode+0x26/0x80 [ 3365.601115][T21231] ? lockdep_hardirqs_on+0x7d/0x100 [ 3365.601159][T21231] do_syscall_64+0x39/0xb0 [ 3365.601212][T21231] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3365.601255][T21231] RIP: 0033:0x7fb9a048c169 [ 3365.601282][T21231] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3365.601317][T21231] RSP: 002b:00007fb99effe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3365.601349][T21231] RAX: ffffffffffffffda RBX: 00007fb9a05abf80 RCX: 00007fb9a048c169 [ 3365.601373][T21231] RDX: 0020000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3365.601393][T21231] RBP: 00007fb9a04e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3365.601417][T21231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3365.601439][T21231] R13: 00007ffd5d45cfcf R14: 00007fb99effe300 R15: 0000000000022000 [ 3365.601481][T21231] [ 3365.607055][T21231] Mem-Info: [ 3365.661579][T21223] /syz3 [ 3365.711335][T21231] active_anon:82375 inactive_anon:1140 isolated_anon:0 [ 3365.711335][T21231] active_file:8 inactive_file:15611 isolated_file:0 [ 3365.711335][T21231] unevictable:768 dirty:25 writeback:0 [ 3365.711335][T21231] slab_reclaimable:30993 slab_unreclaimable:953970 [ 3365.711335][T21231] mapped:19747 shmem:2053 pagetables:682 [ 3365.711335][T21231] sec_pagetables:0 bounce:0 [ 3365.711335][T21231] kernel_misc_reclaimable:0 [ 3365.711335][T21231] free:449770 free_pcp:16529 free_cma:0 [ 3365.820842][T21223] ,task_memcg= [ 3365.825155][T21231] Node 0 active_anon:328748kB inactive_anon:4420kB active_file:8kB inactive_file:57540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no [ 3365.828293][T21223] /syz3 [ 3365.836279][T21231] Node 1 active_anon:392kB inactive_anon:500kB active_file:24kB inactive_file:4904kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:48kB writeback:0kB shmem:1780kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:512kB pagetables:380kB sec_pagetables:0kB all_unreclaimable? no [ 3365.837776][T21223] ,task=syz-executor.3,pid=21223,uid=0 [ 3365.849855][T21231] Node 0 [ 3365.913022][T21223] Memory cgroup out of memory: Killed process 21223 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3365.919568][T21231] DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 3365.988145][T21227] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3366.015434][T21231] lowmem_reserve[]: 08:19:32 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r1, 0x0, 0x4ff9c, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/84, 0x54}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3366.052652][T21227] CPU: 0 PID: 21227 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3366.077660][T21231] 0 [ 3366.099487][T21227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3366.099511][T21227] Call Trace: [ 3366.099521][T21227] [ 3366.099534][T21227] dump_stack_lvl+0x136/0x150 [ 3366.099575][T21227] dump_header+0x10a/0xd70 [ 3366.099620][T21227] oom_kill_process+0x25d/0x600 [ 3366.157395][T21227] out_of_memory+0x35c/0x1660 [ 3366.162162][T21227] ? oom_killer_disable+0x2b0/0x2b0 [ 3366.167434][T21227] ? rcu_read_unlock+0x9/0x60 [ 3366.172182][T21227] ? find_held_lock+0x2d/0x110 [ 3366.177032][T21227] mem_cgroup_out_of_memory+0x206/0x270 [ 3366.182657][T21227] ? mem_cgroup_margin+0x130/0x130 [ 3366.186771][T21231] 2617 [ 3366.187809][T21227] ? lock_downgrade+0x690/0x690 [ 3366.187872][T21227] try_charge_memcg+0xf9b/0x13b0 [ 3366.193014][T21231] 2619 [ 3366.195490][T21227] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3366.195538][T21227] ? rcu_read_unlock+0x9/0x60 [ 3366.204688][T21231] 2619 [ 3366.209219][T21227] ? lock_downgrade+0x690/0x690 [ 3366.209279][T21227] charge_memcg+0x90/0x3b0 [ 3366.209313][T21227] __mem_cgroup_charge+0x2b/0x90 [ 3366.209348][T21227] do_wp_page+0x8eb/0x3520 [ 3366.209393][T21227] ? lock_release+0x670/0x670 [ 3366.209428][T21227] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3366.209468][T21227] ? do_raw_spin_lock+0x124/0x2b0 [ 3366.209504][T21227] ? spin_bug+0x1c0/0x1c0 [ 3366.209535][T21227] ? lock_downgrade+0x690/0x690 [ 3366.209580][T21227] __handle_mm_fault+0x19a1/0x3e60 [ 3366.209629][T21227] ? vm_iomap_memory+0x190/0x190 [ 3366.209696][T21227] handle_mm_fault+0x2ba/0x9c0 [ 3366.209740][T21227] do_user_addr_fault+0x475/0x1230 [ 3366.209787][T21227] ? rcu_is_watching+0x12/0xb0 [ 3366.209842][T21227] exc_page_fault+0x98/0x170 [ 3366.225517][T21231] 2619 [ 3366.226571][T21227] asm_exc_page_fault+0x26/0x30 [ 3366.226620][T21227] RIP: 0033:0x7f79ea839610 [ 3366.226646][T21227] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3366.226678][T21227] RSP: 002b:00007ffd939e5ce0 EFLAGS: 00010246 [ 3366.231796][T21231] [ 3366.236031][T21227] [ 3366.236039][T21227] RAX: 0000000001f9bb79 RBX: 00007f79ea9ac018 RCX: 0000001b2d020000 [ 3366.236062][T21227] RDX: 0000000000000000 RSI: 0000001b2d020018 RDI: 000000000a26eed4 [ 3366.236083][T21227] RBP: 0000000001f9bb79 R08: 0000000000001b79 R09: 0000000001f9bb7d [ 3366.236104][T21227] R10: 00007ffd939e5ea0 R11: 0000000000000246 R12: 00007f79ea9a0000 [ 3366.240995][T21231] Node 0 [ 3366.246143][T21227] R13: 0000000000000001 R14: 000000000000000e R15: ffffffff83d3ec71 [ 3366.246168][T21227] ? apparmor_socket_create+0x151/0x670 [ 3366.246240][T21227] [ 3366.251441][T21231] DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:328708kB inactive_anon:4416kB active_file:8kB inactive_file:55964kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:39040kB local_pcp:20628kB free_cma:0kB [ 3366.304321][T21227] memory: usage 307200kB, limit 307200kB, failcnt 78700 [ 3366.365578][T21231] lowmem_reserve[]: [ 3366.374153][T21227] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3366.389540][T21231] 0 [ 3366.419387][T21227] Memory cgroup stats for [ 3366.433424][T21231] 0 [ 3366.437676][T21227] /syz4 [ 3366.447644][T21231] 1 [ 3366.447994][T21227] : [ 3366.453398][T21227] anon 131072 [ 3366.453398][T21227] file 323584 [ 3366.453398][T21227] kernel 314101760 [ 3366.453398][T21227] kernel_stack 65536 [ 3366.453398][T21227] pagetables 69632 [ 3366.453398][T21227] sec_pagetables 0 [ 3366.453398][T21227] percpu 5432256 [ 3366.453398][T21227] sock 0 [ 3366.453398][T21227] vmalloc 0 [ 3366.453398][T21227] shmem 311296 [ 3366.453398][T21227] zswap 0 [ 3366.453398][T21227] zswapped 0 [ 3366.453398][T21227] file_mapped 311296 [ 3366.453398][T21227] file_dirty 4096 [ 3366.453398][T21227] file_writeback 0 [ 3366.453398][T21227] swapcached 0 [ 3366.453398][T21227] anon_thp 0 [ 3366.453398][T21227] file_thp 0 [ 3366.453398][T21227] shmem_thp 0 [ 3366.453398][T21227] inactive_anon 57344 [ 3366.453398][T21227] active_anon 385024 [ 3366.453398][T21227] inactive_file 12288 [ 3366.453398][T21227] active_file 0 [ 3366.453398][T21227] unevictable 0 [ 3366.453398][T21227] slab_reclaimable 17160 [ 3366.453398][T21227] slab_unreclaimable 308489216 [ 3366.453398][T21227] slab 308506376 [ 3366.453398][T21227] workingset_refault_anon 0 [ 3366.453398][T21227] workingset_refault_file 0 [ 3366.453398][T21227] workingset_activate_anon 0 [ 3366.453398][T21227] workingset_activate_file 0 [ 3366.453398][T21227] workingset_restore_anon 0 [ 3366.453398][T21227] workingset_restore_file 0 [ 3366.453398][T21227] workingset_nodereclaim 0 [ 3366.453398][T21227] pgscan 50877 [ 3366.453398][T21227] pgsteal 494 [ 3366.453398][T21227] pgscan_kswapd 0 [ 3366.453398][T21227] pgscan_direct 50877 [ 3366.453398][T21227] pgscan_khugepaged 0 [ 3366.453398][T21227] pgsteal_kswapd 0 [ 3366.453398][T21227] pgsteal_direct 494 [ 3366.453398][T21227] pgsteal_khugepaged 0 [ 3366.453398][T21227] pgfault 405351 [ 3366.453398][T21227] pgmajfault 1 [ 3366.453398][T21227] pgrefill 140707 [ 3366.453398][T21227] pgactivate 50322 [ 3366.453398][T21227] pgdeactivate 0 [ 3366.453398][T21227] pglazyfree 0 [ 3366.453398][T21227] pglazyfreed 0 [ 3366.453398][T21227] zswpin 0 [ 3366.453398][T21227] zswpout 0 [ 3366.454075][T21231] 1 [ 3366.456051][T21227] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3366.642201][T21231] 1 [ 3366.652057][T21231] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3366.681784][T21231] lowmem_reserve[]: 0 0 0 0 0 [ 3366.685022][T21227] ,cpuset= [ 3366.686775][T21231] Node 1 [ 3366.689239][T21227] syz4 [ 3366.689983][T21231] Normal free:1744160kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:388kB inactive_anon:532kB active_file:28kB inactive_file:4908kB unevictable:1536kB writepending:48kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:26312kB local_pcp:2776kB free_cma:0kB [ 3366.697228][T21227] ,mems_allowed=0-1 [ 3366.725512][T21231] lowmem_reserve[]: 0 0 0 0 0 [ 3366.733881][T21227] ,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21227,uid=0 [ 3366.734993][T21231] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3366.745250][T21227] Memory cgroup out of memory: Killed process 21227 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3366.764881][T21231] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) 24*128kB (UME) 14*256kB (UME) 6*512kB (UM) 10*1024kB (UM) 6*2048kB (M) 0*4096kB = 44180kB [ 3366.801217][T21231] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB 08:19:33 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xda03000000000000) [ 3366.829668][T21231] Node 1 Normal: 2*4kB (UE) 165*8kB (M) 249*16kB (UME) 89*32kB (UME) 85*64kB (UME) 112*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1744160kB [ 3366.867546][T21231] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3366.879393][T21232] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3366.894672][T21231] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3366.912553][T21231] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3366.924819][T21231] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3366.940666][T21232] CPU: 1 PID: 21232 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3366.951170][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3366.961263][T21232] Call Trace: [ 3366.964577][T21232] [ 3366.967530][T21232] dump_stack_lvl+0x136/0x150 [ 3366.972245][T21232] dump_header+0x10a/0xd70 [ 3366.976735][T21232] oom_kill_process+0x25d/0x600 [ 3366.981640][T21232] out_of_memory+0x35c/0x1660 [ 3366.986358][T21232] ? find_held_lock+0x2d/0x110 [ 3366.991187][T21232] ? oom_killer_disable+0x2b0/0x2b0 [ 3366.996428][T21232] ? rcu_read_unlock+0x9/0x60 [ 3367.001143][T21232] ? find_held_lock+0x2d/0x110 [ 3367.005955][T21232] mem_cgroup_out_of_memory+0x206/0x270 [ 3367.011544][T21232] ? mem_cgroup_margin+0x130/0x130 [ 3367.016696][T21232] ? lock_downgrade+0x690/0x690 [ 3367.021603][T21232] try_charge_memcg+0xf9b/0x13b0 [ 3367.026600][T21232] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3367.032619][T21232] ? rcu_read_unlock+0x9/0x60 [ 3367.037333][T21232] ? lock_downgrade+0x690/0x690 [ 3367.042232][T21232] charge_memcg+0x90/0x3b0 [ 3367.046686][T21232] __mem_cgroup_charge+0x2b/0x90 [ 3367.051658][T21232] ? copy_mc_to_kernel+0x3e/0x90 [ 3367.056766][T21232] do_wp_page+0x8eb/0x3520 [ 3367.061229][T21232] ? lock_release+0x670/0x670 [ 3367.065940][T21232] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3367.071354][T21232] ? do_raw_spin_lock+0x124/0x2b0 [ 3367.076417][T21232] ? spin_bug+0x1c0/0x1c0 [ 3367.080785][T21232] ? lock_downgrade+0x690/0x690 [ 3367.085680][T21232] __handle_mm_fault+0x19a1/0x3e60 [ 3367.091122][T21232] ? vm_iomap_memory+0x190/0x190 [ 3367.096142][T21232] handle_mm_fault+0x2ba/0x9c0 [ 3367.101027][T21232] do_user_addr_fault+0x475/0x1230 [ 3367.106183][T21232] ? rcu_is_watching+0x12/0xb0 [ 3367.110986][T21232] exc_page_fault+0x98/0x170 [ 3367.115618][T21232] asm_exc_page_fault+0x26/0x30 [ 3367.120506][T21232] RIP: 0033:0x7f0e44a36fdd [ 3367.124946][T21232] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3367.144583][T21232] RSP: 002b:00007ffc44a97950 EFLAGS: 00010217 [ 3367.150685][T21232] RAX: 0000000000000000 RBX: 00007f0e44babf8c RCX: 00007f0e44a8c169 [ 3367.159047][T21232] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e44babf88 [ 3367.167045][T21232] RBP: 00007f0e44babf80 R08: 00007f0e458bd700 R09: 0000000000000000 [ 3367.175042][T21232] R10: 00007f0e458bd700 R11: 0000000000000246 R12: 00007f0e44babf8c [ 3367.183040][T21232] R13: 00007f0e44600060 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3367.191063][T21232] [ 3367.196904][T21231] 17683 total pagecache pages [ 3367.215108][T21231] 0 pages in swap cache [ 3367.224051][T21231] Free swap = 0kB [ 3367.233494][T21231] Total swap = 0kB [ 3367.242478][T21231] 2097051 pages RAM [ 3367.246850][T21232] memory: usage 307184kB, limit 307200kB, failcnt 75300 [ 3367.251846][T21231] 0 pages HighMem/MovableOnly [ 3367.255271][T21232] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3367.261944][T21231] 392115 pages reserved [ 3367.270439][T21232] Memory cgroup stats for /syz5: [ 3367.270687][T21231] 0 pages cma reserved [ 3367.270709][T21232] anon 90112 [ 3367.270709][T21232] file 356352 [ 3367.270709][T21232] kernel 314109952 [ 3367.270709][T21232] kernel_stack 65536 [ 3367.270709][T21232] pagetables 73728 [ 3367.270709][T21232] sec_pagetables 0 [ 3367.270709][T21232] percpu 5432688 [ 3367.270709][T21232] sock 0 [ 3367.270709][T21232] vmalloc 20480 [ 3367.270709][T21232] shmem 344064 [ 3367.270709][T21232] zswap 0 [ 3367.270709][T21232] zswapped 0 [ 3367.270709][T21232] file_mapped 327680 [ 3367.270709][T21232] file_dirty 0 [ 3367.270709][T21232] file_writeback 0 [ 3367.270709][T21232] swapcached 0 [ 3367.270709][T21232] anon_thp 0 [ 3367.270709][T21232] file_thp 0 [ 3367.270709][T21232] shmem_thp 0 [ 3367.270709][T21232] inactive_anon 53248 [ 3367.270709][T21232] active_anon 380928 [ 3367.270709][T21232] inactive_file 4096 [ 3367.270709][T21232] active_file 8192 [ 3367.270709][T21232] unevictable 0 [ 3367.270709][T21232] slab_reclaimable 12712 [ 3367.270709][T21232] slab_unreclaimable 308476008 [ 3367.270709][T21232] slab 308488720 [ 3367.270709][T21232] workingset_refault_anon 0 [ 3367.270709][T21232] workingset_refault_file 1 [ 3367.270709][T21232] workingset_activate_anon 0 [ 3367.270709][T21232] workingset_activate_file 0 [ 3367.270709][T21232] workingset_restore_anon 0 [ 3367.270709][T21232] workingset_restore_file 0 [ 3367.270709][T21232] workingset_nodereclaim 0 [ 3367.270709][T21232] pgscan 43616 [ 3367.270709][T21232] pgsteal 459 [ 3367.270709][T21232] pgscan_kswapd 0 [ 3367.270709][T21232] pgscan_direct 43616 [ 3367.270709][T21232] pgscan_khugepaged 0 [ 3367.270709][T21232] pgsteal_kswapd 0 [ 3367.270709][T21232] pgsteal_direct 459 [ 3367.270709][T21232] pgsteal_khugepaged 0 [ 3367.270709][T21232] pgfault 412398 [ 3367.270709][T21232] pgmajfault 0 [ 3367.270709][T21232] pgrefill 143856 [ 3367.270709][T21232] pgactivate 43142 08:19:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x40000000000000) [ 3367.270709][T21232] pgdeactivate 0 [ 3367.270709][T21232] pglazyfree 0 [ 3367.270709][T21232] pglazyfreed 0 [ 3367.270709][T21232] zswpin 0 [ 3367.270709][T21232] zswpout 0 [ 3367.482606][T21232] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21232,uid=0 [ 3367.506883][T21232] Memory cgroup out of memory: Killed process 21232 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3367.525933][T21233] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3367.541911][T21233] CPU: 0 PID: 21233 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3367.552609][T21233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3367.562717][T21233] Call Trace: [ 3367.566143][T21233] [ 3367.569117][T21233] dump_stack_lvl+0x136/0x150 [ 3367.573997][T21233] dump_header+0x10a/0xd70 [ 3367.578716][T21233] oom_kill_process+0x25d/0x600 [ 3367.583731][T21233] out_of_memory+0x35c/0x1660 [ 3367.588563][T21233] ? oom_killer_disable+0x2b0/0x2b0 [ 3367.593940][T21233] ? rcu_read_unlock+0x9/0x60 [ 3367.598673][T21233] ? find_held_lock+0x2d/0x110 [ 3367.603522][T21233] mem_cgroup_out_of_memory+0x206/0x270 [ 3367.609119][T21233] ? mem_cgroup_margin+0x130/0x130 [ 3367.614279][T21233] ? lock_downgrade+0x690/0x690 [ 3367.619193][T21233] try_charge_memcg+0xf9b/0x13b0 [ 3367.624180][T21233] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3367.630212][T21233] ? rcu_read_unlock+0x9/0x60 [ 3367.634950][T21233] ? lock_downgrade+0x690/0x690 [ 3367.639925][T21233] charge_memcg+0x90/0x3b0 [ 3367.644388][T21233] __mem_cgroup_charge+0x2b/0x90 [ 3367.649406][T21233] do_wp_page+0x8eb/0x3520 [ 3367.653871][T21233] ? lock_release+0x670/0x670 [ 3367.658595][T21233] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3367.664012][T21233] ? do_raw_spin_lock+0x124/0x2b0 [ 3367.669107][T21233] ? spin_bug+0x1c0/0x1c0 [ 3367.673529][T21233] ? lock_downgrade+0x690/0x690 [ 3367.678441][T21233] __handle_mm_fault+0x19a1/0x3e60 [ 3367.683607][T21233] ? vm_iomap_memory+0x190/0x190 [ 3367.688622][T21233] handle_mm_fault+0x2ba/0x9c0 [ 3367.693475][T21233] do_user_addr_fault+0x475/0x1230 [ 3367.698660][T21233] ? rcu_is_watching+0x12/0xb0 [ 3367.703579][T21233] exc_page_fault+0x98/0x170 [ 3367.708217][T21233] asm_exc_page_fault+0x26/0x30 [ 3367.713139][T21233] RIP: 0033:0x7f9ac6239610 [ 3367.717599][T21233] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3367.737264][T21233] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3367.743414][T21233] RAX: 00000000c45a0a22 RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3367.751482][T21233] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000a21e670 [ 3367.759482][T21233] RBP: 00000000c45a0a22 R08: 0000000000000a22 R09: 00000000c45a0a26 [ 3367.767610][T21233] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3367.775626][T21233] R13: 0000000000000001 R14: 0000000000000008 R15: ffffffff83cafedf [ 3367.784494][T21233] ? security_socket_create+0x3f/0xc0 [ 3367.789949][T21233] 08:19:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xe04b0300) [ 3367.808439][T21233] memory: usage 307200kB, limit 307200kB, failcnt 72276 [ 3367.815502][T21233] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3367.823200][T21233] Memory cgroup stats for /syz2: [ 3367.823478][T21233] anon 114688 [ 3367.823478][T21233] file 364544 [ 3367.823478][T21233] kernel 314093568 [ 3367.823478][T21233] kernel_stack 65536 [ 3367.823478][T21233] pagetables 69632 [ 3367.823478][T21233] sec_pagetables 0 [ 3367.823478][T21233] percpu 5428704 [ 3367.823478][T21233] sock 0 [ 3367.823478][T21233] vmalloc 0 [ 3367.823478][T21233] shmem 348160 [ 3367.823478][T21233] zswap 0 [ 3367.823478][T21233] zswapped 0 [ 3367.823478][T21233] file_mapped 311296 [ 3367.823478][T21233] file_dirty 12288 [ 3367.823478][T21233] file_writeback 0 [ 3367.823478][T21233] swapcached 0 [ 3367.823478][T21233] anon_thp 0 [ 3367.823478][T21233] file_thp 0 [ 3367.823478][T21233] shmem_thp 0 [ 3367.823478][T21233] inactive_anon 405504 [ 3367.823478][T21233] active_anon 57344 [ 3367.823478][T21233] inactive_file 12288 [ 3367.823478][T21233] active_file 4096 [ 3367.823478][T21233] unevictable 0 [ 3367.823478][T21233] slab_reclaimable 218152 [ 3367.823478][T21233] slab_unreclaimable 308286168 [ 3367.823478][T21233] slab 308504320 [ 3367.823478][T21233] workingset_refault_anon 0 [ 3367.823478][T21233] workingset_refault_file 0 [ 3367.823478][T21233] workingset_activate_anon 0 [ 3367.823478][T21233] workingset_activate_file 0 [ 3367.823478][T21233] workingset_restore_anon 0 [ 3367.823478][T21233] workingset_restore_file 0 [ 3367.823478][T21233] workingset_nodereclaim 0 [ 3367.823478][T21233] pgscan 55579 [ 3367.823478][T21233] pgsteal 468 [ 3367.823478][T21233] pgscan_kswapd 0 [ 3367.823478][T21233] pgscan_direct 55579 [ 3367.823478][T21233] pgscan_khugepaged 0 [ 3367.823478][T21233] pgsteal_kswapd 0 [ 3367.823478][T21233] pgsteal_direct 468 [ 3367.823478][T21233] pgsteal_khugepaged 0 [ 3367.823478][T21233] pgfault 422065 [ 3367.823478][T21233] pgmajfault 1 [ 3367.823478][T21233] pgrefill 185362 [ 3367.823478][T21233] pgactivate 55072 [ 3367.823478][T21233] pgdeactivate 0 [ 3367.823478][T21233] pglazyfree 0 [ 3367.823478][T21233] pglazyfreed 0 [ 3367.823478][T21233] zswpin 0 [ 3367.823478][T21233] zswpout 0 08:19:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0xe0, 0x24, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xffff, 0x6}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x8, 0x9, 0x2, 0x7ff, 0x7d, 0x1}}, {0x6, 0x2, [0x21]}}, {{0xffffffffffffff8f, 0x1, {0xd1, 0x0, 0x0, 0xffffffff, 0x1, 0x8, 0xffffff00, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x2, 0x0, 0x13a, 0x1, 0x3d]}}, {{0x1c, 0x1, {0x7, 0x9f, 0x6, 0x8, 0x0, 0x8, 0x3ff, 0x8}}, {0x14, 0x2, [0x6, 0x80, 0x1, 0x3, 0x81, 0x400, 0x80, 0x44b]}}, {{0x1c, 0x1, {0x9, 0x20, 0x3, 0x9d4f, 0x1, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0x81]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) [ 3368.032451][T21233] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21233,uid=0 [ 3368.053853][T21233] Memory cgroup out of memory: Killed process 21233 (syz-executor.2) total-vm:54548kB, anon-rss:360kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:34 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4c000000) [ 3368.119069][T21237] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3368.161655][T21237] CPU: 1 PID: 21237 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3368.172173][T21237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3368.182284][T21237] Call Trace: [ 3368.185598][T21237] [ 3368.188570][T21237] dump_stack_lvl+0x136/0x150 [ 3368.193395][T21237] dump_header+0x10a/0xd70 [ 3368.197877][T21237] oom_kill_process+0x25d/0x600 [ 3368.202800][T21237] out_of_memory+0x35c/0x1660 [ 3368.207548][T21237] ? find_held_lock+0x2d/0x110 [ 3368.212392][T21237] ? oom_killer_disable+0x2b0/0x2b0 [ 3368.217651][T21237] ? rcu_read_unlock+0x9/0x60 [ 3368.222384][T21237] ? find_held_lock+0x2d/0x110 [ 3368.227204][T21237] mem_cgroup_out_of_memory+0x206/0x270 [ 3368.232795][T21237] ? mem_cgroup_margin+0x130/0x130 [ 3368.237960][T21237] ? lock_downgrade+0x690/0x690 [ 3368.242864][T21237] try_charge_memcg+0xf9b/0x13b0 [ 3368.247853][T21237] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3368.253866][T21237] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3368.259633][T21237] ? lock_downgrade+0x690/0x690 [ 3368.264523][T21237] ? lock_downgrade+0x690/0x690 [ 3368.269436][T21237] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3368.275051][T21237] __alloc_pages+0x1f3/0x4a0 [ 3368.279678][T21237] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3368.286570][T21237] ? print_usage_bug.part.0+0x660/0x660 [ 3368.292172][T21237] ? find_held_lock+0x2d/0x110 [ 3368.297004][T21237] alloc_pages+0x1aa/0x270 [ 3368.301508][T21237] pte_alloc_one+0x1a/0x230 [ 3368.306064][T21237] __pte_alloc+0x6d/0x260 [ 3368.310444][T21237] ? pmd_install+0x160/0x160 [ 3368.315069][T21237] ? _raw_spin_unlock+0x28/0x40 [ 3368.319965][T21237] ? __pmd_alloc+0x30c/0x5d0 [ 3368.324605][T21237] __handle_mm_fault+0x3626/0x3e60 [ 3368.329771][T21237] ? vm_iomap_memory+0x190/0x190 [ 3368.334865][T21237] handle_mm_fault+0x2ba/0x9c0 [ 3368.339675][T21237] do_user_addr_fault+0x475/0x1230 [ 3368.344828][T21237] ? rcu_is_watching+0x12/0xb0 [ 3368.349634][T21237] exc_page_fault+0x98/0x170 [ 3368.354264][T21237] asm_exc_page_fault+0x26/0x30 [ 3368.359158][T21237] RIP: 0033:0x7f79ea82bde9 [ 3368.363600][T21237] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3368.383242][T21237] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3368.389338][T21237] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3368.397334][T21237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3368.405434][T21237] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3368.413431][T21237] R10: 00007f79ea400068 R11: 0000000000000246 R12: 000000000033591c [ 3368.421430][T21237] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3368.429451][T21237] [ 3368.486882][T21237] memory: usage 307200kB, limit 307200kB, failcnt 78750 [ 3368.495298][T21237] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3368.512664][T21237] Memory cgroup stats for /syz4: [ 3368.512942][T21237] anon 135168 [ 3368.512942][T21237] file 315392 [ 3368.512942][T21237] kernel 314122240 [ 3368.512942][T21237] kernel_stack 65536 [ 3368.512942][T21237] pagetables 73728 [ 3368.512942][T21237] sec_pagetables 0 [ 3368.512942][T21237] percpu 5432320 [ 3368.512942][T21237] sock 0 [ 3368.512942][T21237] vmalloc 0 [ 3368.512942][T21237] shmem 311296 [ 3368.512942][T21237] zswap 0 [ 3368.512942][T21237] zswapped 0 [ 3368.512942][T21237] file_mapped 311296 [ 3368.512942][T21237] file_dirty 4096 [ 3368.512942][T21237] file_writeback 0 [ 3368.512942][T21237] swapcached 0 [ 3368.512942][T21237] anon_thp 0 [ 3368.512942][T21237] file_thp 0 [ 3368.512942][T21237] shmem_thp 0 [ 3368.512942][T21237] inactive_anon 81920 [ 3368.512942][T21237] active_anon 364544 [ 3368.512942][T21237] inactive_file 0 [ 3368.512942][T21237] active_file 4096 [ 3368.512942][T21237] unevictable 0 [ 3368.512942][T21237] slab_reclaimable 16680 [ 3368.512942][T21237] slab_unreclaimable 308498448 [ 3368.512942][T21237] slab 308515128 [ 3368.512942][T21237] workingset_refault_anon 0 [ 3368.512942][T21237] workingset_refault_file 0 [ 3368.512942][T21237] workingset_activate_anon 0 [ 3368.512942][T21237] workingset_activate_file 0 [ 3368.512942][T21237] workingset_restore_anon 0 [ 3368.512942][T21237] workingset_restore_file 0 [ 3368.512942][T21237] workingset_nodereclaim 0 [ 3368.512942][T21237] pgscan 50894 [ 3368.512942][T21237] pgsteal 496 [ 3368.512942][T21237] pgscan_kswapd 0 [ 3368.512942][T21237] pgscan_direct 50894 [ 3368.512942][T21237] pgscan_khugepaged 0 [ 3368.512942][T21237] pgsteal_kswapd 0 [ 3368.512942][T21237] pgsteal_direct 496 [ 3368.512942][T21237] pgsteal_khugepaged 0 [ 3368.512942][T21237] pgfault 405413 [ 3368.512942][T21237] pgmajfault 1 [ 3368.512942][T21237] pgrefill 140757 [ 3368.512942][T21237] pgactivate 50337 [ 3368.512942][T21237] pgdeactivate 0 [ 3368.512942][T21237] pglazyfree 0 [ 3368.512942][T21237] pglazyfreed 0 [ 3368.512942][T21237] zswpin 0 [ 3368.512942][T21237] zswpout 0 [ 3368.711728][T21237] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21237,uid=0 [ 3368.730261][T21237] Memory cgroup out of memory: Killed process 21237 (syz-executor.4) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3368.748423][T21234] syz-executor.3 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3368.770169][T21234] CPU: 0 PID: 21234 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3368.780673][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3368.790783][T21234] Call Trace: [ 3368.794107][T21234] [ 3368.797087][T21234] dump_stack_lvl+0x136/0x150 [ 3368.801829][T21234] dump_header+0x10a/0xd70 [ 3368.806323][T21234] oom_kill_process+0x25d/0x600 [ 3368.811245][T21234] out_of_memory+0x35c/0x1660 [ 3368.816005][T21234] ? oom_killer_disable+0x2b0/0x2b0 [ 3368.821279][T21234] ? rcu_read_unlock+0x9/0x60 [ 3368.826025][T21234] ? find_held_lock+0x2d/0x110 [ 3368.830870][T21234] mem_cgroup_out_of_memory+0x206/0x270 [ 3368.836505][T21234] ? mem_cgroup_margin+0x130/0x130 [ 3368.841691][T21234] ? lock_downgrade+0x690/0x690 [ 3368.846628][T21234] try_charge_memcg+0xf9b/0x13b0 [ 3368.851639][T21234] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3368.857690][T21234] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3368.863504][T21234] ? lock_downgrade+0x690/0x690 [ 3368.868435][T21234] ? lock_downgrade+0x690/0x690 [ 3368.873350][T21234] ? rcu_read_unlock+0x9/0x60 [ 3368.878157][T21234] obj_cgroup_charge+0x2af/0x5e0 [ 3368.883170][T21234] __kmem_cache_alloc_node+0xa3/0x320 [ 3368.888611][T21234] ? copy_semundo+0x18b/0x300 [ 3368.893390][T21234] kmalloc_trace+0x26/0xe0 [ 3368.897876][T21234] copy_semundo+0x18b/0x300 [ 3368.902444][T21234] copy_process+0x24a5/0x7590 [ 3368.907223][T21234] ? __cleanup_sighand+0xb0/0xb0 [ 3368.912243][T21234] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3368.918333][T21234] ? psi_memstall_leave+0x174/0x250 [ 3368.923606][T21234] ? lock_downgrade+0x690/0x690 [ 3368.928526][T21234] kernel_clone+0xeb/0x890 [ 3368.933007][T21234] ? create_io_thread+0xf0/0xf0 [ 3368.937897][T21234] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3368.944202][T21234] ? lock_downgrade+0x690/0x690 [ 3368.949155][T21234] __do_sys_clone+0xba/0x100 [ 3368.953796][T21234] ? kernel_clone+0x890/0x890 [ 3368.958523][T21234] ? syscall_enter_from_user_mode+0x26/0x80 [ 3368.964488][T21234] do_syscall_64+0x39/0xb0 [ 3368.969005][T21234] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3368.975144][T21234] RIP: 0033:0x7f461ea8d591 [ 3368.979630][T21234] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3368.999618][T21234] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3369.008067][T21234] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3369.016153][T21234] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3369.024186][T21234] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 08:19:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xda53030000000000) 08:19:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x40030000000000) [ 3369.032380][T21234] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3369.040379][T21234] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3369.048397][T21234] [ 3369.057158][T21234] memory: usage 307200kB, limit 307200kB, failcnt 83113 [ 3369.064377][T21234] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3369.092238][T21234] Memory cgroup stats for /syz3: [ 3369.092478][T21234] anon 86016 [ 3369.092478][T21234] file 356352 [ 3369.092478][T21234] kernel 314130432 [ 3369.092478][T21234] kernel_stack 65536 [ 3369.092478][T21234] pagetables 69632 [ 3369.092478][T21234] sec_pagetables 0 [ 3369.092478][T21234] percpu 5432256 [ 3369.092478][T21234] sock 0 [ 3369.092478][T21234] vmalloc 8192 [ 3369.092478][T21234] shmem 339968 [ 3369.092478][T21234] zswap 0 [ 3369.092478][T21234] zswapped 0 [ 3369.092478][T21234] file_mapped 327680 [ 3369.092478][T21234] file_dirty 16384 [ 3369.092478][T21234] file_writeback 0 [ 3369.092478][T21234] swapcached 0 [ 3369.092478][T21234] anon_thp 0 [ 3369.092478][T21234] file_thp 0 [ 3369.092478][T21234] shmem_thp 0 [ 3369.092478][T21234] inactive_anon 28672 [ 3369.092478][T21234] active_anon 397312 [ 3369.092478][T21234] inactive_file 12288 [ 3369.092478][T21234] active_file 4096 [ 3369.092478][T21234] unevictable 0 [ 3369.092478][T21234] slab_reclaimable 36704 [ 3369.092478][T21234] slab_unreclaimable 308482240 [ 3369.092478][T21234] slab 308518944 [ 3369.092478][T21234] workingset_refault_anon 0 [ 3369.092478][T21234] workingset_refault_file 2 [ 3369.092478][T21234] workingset_activate_anon 0 [ 3369.092478][T21234] workingset_activate_file 0 [ 3369.092478][T21234] workingset_restore_anon 0 [ 3369.092478][T21234] workingset_restore_file 0 [ 3369.092478][T21234] workingset_nodereclaim 0 [ 3369.092478][T21234] pgscan 56471 [ 3369.092478][T21234] pgsteal 461 [ 3369.092478][T21234] pgscan_kswapd 0 [ 3369.092478][T21234] pgscan_direct 56471 [ 3369.092478][T21234] pgscan_khugepaged 0 [ 3369.092478][T21234] pgsteal_kswapd 0 [ 3369.092478][T21234] pgsteal_direct 461 [ 3369.092478][T21234] pgsteal_khugepaged 0 [ 3369.092478][T21234] pgfault 416387 [ 3369.092478][T21234] pgmajfault 1 [ 3369.092478][T21234] pgrefill 215859 [ 3369.092478][T21234] pgactivate 56001 [ 3369.092478][T21234] pgdeactivate 0 [ 3369.092478][T21234] pglazyfree 0 [ 3369.092478][T21234] pglazyfreed 0 [ 3369.092478][T21234] zswpin 0 [ 3369.092478][T21234] zswpout 0 [ 3369.323218][T21234] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21234,uid=0 [ 3369.352143][T21234] Memory cgroup out of memory: Killed process 21234 (syz-executor.3) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3369.379190][T21241] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3369.410278][T21241] CPU: 0 PID: 21241 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3369.420877][T21241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3369.431073][T21241] Call Trace: [ 3369.434397][T21241] [ 3369.437375][T21241] dump_stack_lvl+0x136/0x150 [ 3369.442119][T21241] dump_header+0x10a/0xd70 [ 3369.446643][T21241] oom_kill_process+0x25d/0x600 [ 3369.451580][T21241] out_of_memory+0x35c/0x1660 [ 3369.456360][T21241] ? oom_killer_disable+0x2b0/0x2b0 [ 3369.461641][T21241] ? rcu_read_unlock+0x9/0x60 [ 3369.466389][T21241] ? find_held_lock+0x2d/0x110 [ 3369.471277][T21241] mem_cgroup_out_of_memory+0x206/0x270 08:19:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x59030000000000) [ 3369.476910][T21241] ? mem_cgroup_margin+0x130/0x130 [ 3369.482098][T21241] ? lock_downgrade+0x690/0x690 [ 3369.487122][T21241] try_charge_memcg+0xf9b/0x13b0 [ 3369.492135][T21241] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3369.498193][T21241] ? rcu_read_unlock+0x9/0x60 [ 3369.502941][T21241] ? lock_downgrade+0x690/0x690 [ 3369.507882][T21241] charge_memcg+0x90/0x3b0 [ 3369.512365][T21241] __mem_cgroup_charge+0x2b/0x90 [ 3369.517372][T21241] ? copy_mc_to_kernel+0x3e/0x90 [ 3369.522391][T21241] do_wp_page+0x8eb/0x3520 [ 3369.526897][T21241] ? lock_release+0x670/0x670 [ 3369.531643][T21241] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3369.537104][T21241] ? do_raw_spin_lock+0x124/0x2b0 [ 3369.542204][T21241] ? spin_bug+0x1c0/0x1c0 [ 3369.546607][T21241] ? lock_downgrade+0x690/0x690 [ 3369.551544][T21241] __handle_mm_fault+0x19a1/0x3e60 [ 3369.556742][T21241] ? vm_iomap_memory+0x190/0x190 [ 3369.561780][T21241] handle_mm_fault+0x2ba/0x9c0 [ 3369.566623][T21241] do_user_addr_fault+0x475/0x1230 [ 3369.571813][T21241] ? rcu_is_watching+0x12/0xb0 [ 3369.576654][T21241] exc_page_fault+0x98/0x170 [ 3369.581348][T21241] asm_exc_page_fault+0x26/0x30 [ 3369.586277][T21241] RIP: 0033:0x7f0e44a36fdd [ 3369.590751][T21241] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3369.610409][T21241] RSP: 002b:00007ffc44a97950 EFLAGS: 00010217 [ 3369.616533][T21241] RAX: 0000000000000000 RBX: 00007f0e44babf8c RCX: 00007f0e44a8c169 [ 3369.624603][T21241] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0e44babf88 [ 3369.632628][T21241] RBP: 00007f0e44babf80 R08: 00007f0e458bd700 R09: 0000000000000000 [ 3369.640644][T21241] R10: 00007f0e458bd700 R11: 0000000000000246 R12: 00007f0e44babf8c [ 3369.648747][T21241] R13: 00007f0e44600060 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3369.656769][T21241] [ 3369.671087][T21241] memory: usage 307200kB, limit 307200kB, failcnt 75406 [ 3369.678322][T21241] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3369.685222][T21241] Memory cgroup stats for /syz5: [ 3369.685479][T21241] anon 90112 [ 3369.685479][T21241] file 356352 [ 3369.685479][T21241] kernel 314109952 [ 3369.685479][T21241] kernel_stack 65536 [ 3369.685479][T21241] pagetables 73728 [ 3369.685479][T21241] sec_pagetables 0 [ 3369.685479][T21241] percpu 5432688 [ 3369.685479][T21241] sock 0 [ 3369.685479][T21241] vmalloc 20480 [ 3369.685479][T21241] shmem 344064 [ 3369.685479][T21241] zswap 0 [ 3369.685479][T21241] zswapped 0 [ 3369.685479][T21241] file_mapped 327680 [ 3369.685479][T21241] file_dirty 0 [ 3369.685479][T21241] file_writeback 0 [ 3369.685479][T21241] swapcached 0 [ 3369.685479][T21241] anon_thp 0 [ 3369.685479][T21241] file_thp 0 [ 3369.685479][T21241] shmem_thp 0 [ 3369.685479][T21241] inactive_anon 32768 [ 3369.685479][T21241] active_anon 401408 [ 3369.685479][T21241] inactive_file 4096 [ 3369.685479][T21241] active_file 8192 [ 3369.685479][T21241] unevictable 0 [ 3369.685479][T21241] slab_reclaimable 12712 [ 3369.685479][T21241] slab_unreclaimable 308476008 [ 3369.685479][T21241] slab 308488720 [ 3369.685479][T21241] workingset_refault_anon 0 [ 3369.685479][T21241] workingset_refault_file 1 [ 3369.685479][T21241] workingset_activate_anon 0 [ 3369.685479][T21241] workingset_activate_file 0 [ 3369.685479][T21241] workingset_restore_anon 0 [ 3369.685479][T21241] workingset_restore_file 0 [ 3369.685479][T21241] workingset_nodereclaim 0 [ 3369.685479][T21241] pgscan 43733 [ 3369.685479][T21241] pgsteal 459 [ 3369.685479][T21241] pgscan_kswapd 0 [ 3369.685479][T21241] pgscan_direct 43733 [ 3369.685479][T21241] pgscan_khugepaged 0 [ 3369.685479][T21241] pgsteal_kswapd 0 [ 3369.685479][T21241] pgsteal_direct 459 [ 3369.685479][T21241] pgsteal_khugepaged 0 [ 3369.685479][T21241] pgfault 412441 [ 3369.685479][T21241] pgmajfault 0 [ 3369.685479][T21241] pgrefill 143856 [ 3369.685479][T21241] pgactivate 43259 [ 3369.685479][T21241] pgdeactivate 0 [ 3369.685479][T21241] pglazyfree 0 [ 3369.685479][T21241] pglazyfreed 0 [ 3369.685479][T21241] zswpin 0 [ 3369.685479][T21241] zswpout 0 08:19:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xe4000000) [ 3369.875079][T21241] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21241,uid=0 [ 3369.890938][T21241] Memory cgroup out of memory: Killed process 21241 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3369.910323][T21242] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3369.927340][T21242] CPU: 1 PID: 21242 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3369.937937][T21242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3369.948102][T21242] Call Trace: [ 3369.951432][T21242] [ 3369.954415][T21242] dump_stack_lvl+0x136/0x150 [ 3369.959165][T21242] dump_header+0x10a/0xd70 [ 3369.963658][T21242] oom_kill_process+0x25d/0x600 [ 3369.968659][T21242] out_of_memory+0x35c/0x1660 [ 3369.973436][T21242] ? oom_killer_disable+0x2b0/0x2b0 [ 3369.978706][T21242] ? rcu_read_unlock+0x9/0x60 [ 3369.983454][T21242] ? find_held_lock+0x2d/0x110 [ 3369.988307][T21242] mem_cgroup_out_of_memory+0x206/0x270 [ 3369.993927][T21242] ? mem_cgroup_margin+0x130/0x130 [ 3369.999101][T21242] ? lock_downgrade+0x690/0x690 [ 3370.004025][T21242] try_charge_memcg+0xf9b/0x13b0 [ 3370.009043][T21242] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3370.015080][T21242] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3370.020907][T21242] ? lock_downgrade+0x690/0x690 [ 3370.025799][T21242] ? lock_downgrade+0x690/0x690 [ 3370.030695][T21242] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3370.036310][T21242] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3370.042526][T21242] copy_process+0x13a7/0x7590 [ 3370.047262][T21242] ? find_held_lock+0x2d/0x110 [ 3370.052278][T21242] ? __cleanup_sighand+0xb0/0xb0 [ 3370.057306][T21242] ? lock_downgrade+0x690/0x690 [ 3370.062233][T21242] ? folio_flags.constprop.0+0x53/0x150 [ 3370.067852][T21242] ? folio_add_lru+0x47f/0x7c0 [ 3370.072685][T21242] kernel_clone+0xeb/0x890 [ 3370.077153][T21242] ? create_io_thread+0xf0/0xf0 [ 3370.082060][T21242] ? vm_iomap_memory+0x190/0x190 [ 3370.087056][T21242] ? find_held_lock+0x2d/0x110 [ 3370.091898][T21242] __do_sys_clone+0xba/0x100 [ 3370.096539][T21242] ? kernel_clone+0x890/0x890 [ 3370.101280][T21242] ? syscall_enter_from_user_mode+0x26/0x80 [ 3370.107235][T21242] do_syscall_64+0x39/0xb0 [ 3370.111725][T21242] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.117699][T21242] RIP: 0033:0x7faa0ba8d591 [ 3370.122169][T21242] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3370.141809][T21242] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3370.150266][T21242] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3370.158283][T21242] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3370.166310][T21242] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3370.174325][T21242] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3370.182324][T21242] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3370.190367][T21242] [ 3370.198184][T21242] memory: usage 307200kB, limit 307200kB, failcnt 96120 [ 3370.208473][T21242] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3370.215587][T21242] Memory cgroup stats for /syz1: [ 3370.215859][T21242] anon 102400 [ 3370.215859][T21242] file 352256 [ 3370.215859][T21242] kernel 314118144 [ 3370.215859][T21242] kernel_stack 65536 [ 3370.215859][T21242] pagetables 81920 [ 3370.215859][T21242] sec_pagetables 0 [ 3370.215859][T21242] percpu 5423968 [ 3370.215859][T21242] sock 0 [ 3370.215859][T21242] vmalloc 24576 [ 3370.215859][T21242] shmem 339968 [ 3370.215859][T21242] zswap 0 [ 3370.215859][T21242] zswapped 0 [ 3370.215859][T21242] file_mapped 262144 [ 3370.215859][T21242] file_dirty 12288 [ 3370.215859][T21242] file_writeback 0 [ 3370.215859][T21242] swapcached 0 [ 3370.215859][T21242] anon_thp 0 [ 3370.215859][T21242] file_thp 0 [ 3370.215859][T21242] shmem_thp 0 [ 3370.215859][T21242] inactive_anon 40960 [ 3370.215859][T21242] active_anon 401408 [ 3370.215859][T21242] inactive_file 12288 [ 3370.215859][T21242] active_file 0 [ 3370.215859][T21242] unevictable 0 [ 3370.215859][T21242] slab_reclaimable 245368 [ 3370.215859][T21242] slab_unreclaimable 308226616 [ 3370.215859][T21242] slab 308471984 [ 3370.215859][T21242] workingset_refault_anon 0 [ 3370.215859][T21242] workingset_refault_file 4 [ 3370.215859][T21242] workingset_activate_anon 0 [ 3370.215859][T21242] workingset_activate_file 0 [ 3370.215859][T21242] workingset_restore_anon 0 [ 3370.215859][T21242] workingset_restore_file 2 [ 3370.215859][T21242] workingset_nodereclaim 0 [ 3370.215859][T21242] pgscan 80114 [ 3370.215859][T21242] pgsteal 606 [ 3370.215859][T21242] pgscan_kswapd 0 [ 3370.215859][T21242] pgscan_direct 80114 [ 3370.215859][T21242] pgscan_khugepaged 0 [ 3370.215859][T21242] pgsteal_kswapd 0 [ 3370.215859][T21242] pgsteal_direct 606 [ 3370.215859][T21242] pgsteal_khugepaged 0 [ 3370.215859][T21242] pgfault 410427 [ 3370.215859][T21242] pgmajfault 0 [ 3370.215859][T21242] pgrefill 219088 [ 3370.215859][T21242] pgactivate 79415 [ 3370.215859][T21242] pgdeactivate 0 [ 3370.215859][T21242] pglazyfree 0 [ 3370.215859][T21242] pglazyfreed 0 [ 3370.215859][T21242] zswpin 0 [ 3370.215859][T21242] zswpout 0 [ 3370.408743][T21242] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21242,uid=0 [ 3370.424530][T21242] Memory cgroup out of memory: Killed process 21242 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3370.442160][T21247] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3370.455030][T21247] CPU: 1 PID: 21247 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3370.465532][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3370.475735][T21247] Call Trace: [ 3370.479065][T21247] 08:19:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@newqdisc={0xe0, 0x24, 0x4, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xffff}, {0xffff, 0x6}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x81, 0x3f}}, @TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x8, 0x9, 0x2, 0x7ff, 0x7d, 0x1}}, {0x6, 0x2, [0x21]}}, {{0xffffffffffffff8f, 0x1, {0xd1, 0x0, 0x0, 0xffffffff, 0x1, 0x8, 0xffffff00, 0x7}}, {0x12, 0x2, [0x1, 0x4, 0x2, 0x0, 0x13a, 0x1, 0x3d]}}, {{0x1c, 0x1, {0x7, 0x9f, 0x6, 0x8, 0x0, 0x8, 0x3ff, 0x8}}, {0x14, 0x2, [0x6, 0x80, 0x1, 0x3, 0x81, 0x400, 0x80, 0x44b]}}, {{0x1c, 0x1, {0x9, 0x20, 0x3, 0x9d4f, 0x1, 0x0, 0x9, 0x1}}, {0x6, 0x2, [0x81]}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) [ 3370.482056][T21247] dump_stack_lvl+0x136/0x150 [ 3370.486853][T21247] dump_header+0x10a/0xd70 [ 3370.491354][T21247] oom_kill_process+0x25d/0x600 [ 3370.496290][T21247] out_of_memory+0x35c/0x1660 [ 3370.501062][T21247] ? oom_killer_disable+0x2b0/0x2b0 [ 3370.506351][T21247] ? rcu_read_unlock+0x9/0x60 [ 3370.511112][T21247] ? find_held_lock+0x2d/0x110 [ 3370.515977][T21247] mem_cgroup_out_of_memory+0x206/0x270 [ 3370.521622][T21247] ? mem_cgroup_margin+0x130/0x130 [ 3370.526814][T21247] ? lock_downgrade+0x690/0x690 [ 3370.531761][T21247] try_charge_memcg+0xf9b/0x13b0 [ 3370.536798][T21247] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3370.542928][T21247] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3370.548743][T21247] ? lock_downgrade+0x690/0x690 [ 3370.553676][T21247] ? lock_downgrade+0x690/0x690 [ 3370.558799][T21247] obj_cgroup_charge+0x2af/0x5e0 [ 3370.563816][T21247] ? sock_alloc_inode+0x27/0x1d0 [ 3370.568847][T21247] kmem_cache_alloc_lru+0x142/0x600 [ 3370.574239][T21247] sock_alloc_inode+0x27/0x1d0 [ 3370.579189][T21247] ? sock_free_inode+0x30/0x30 [ 3370.584029][T21247] alloc_inode+0x61/0x230 [ 3370.588444][T21247] new_inode_pseudo+0x17/0x80 [ 3370.593200][T21247] sock_alloc+0x40/0x270 [ 3370.597512][T21247] __sock_create+0xbd/0x850 [ 3370.602104][T21247] __sys_socket+0x133/0x250 [ 3370.606688][T21247] ? __sys_socket_file+0x1d0/0x1d0 [ 3370.611880][T21247] ? kcov_ioctl+0x384/0x6f0 [ 3370.616463][T21247] __x64_sys_socket+0x73/0xb0 [ 3370.621310][T21247] do_syscall_64+0x39/0xb0 [ 3370.625819][T21247] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3370.632143][T21247] RIP: 0033:0x7f9ac628c169 [ 3370.636615][T21247] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3370.656336][T21247] RSP: 002b:00007f9ac6f61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3370.664803][T21247] RAX: ffffffffffffffda RBX: 00007f9ac63abf80 RCX: 00007f9ac628c169 [ 3370.672878][T21247] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3370.680915][T21247] RBP: 00007f9ac62e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3370.689046][T21247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3370.697086][T21247] R13: 00007ffc61d0e97f R14: 00007f9ac6f61300 R15: 0000000000022000 [ 3370.705120][T21247] [ 3370.719682][T21247] memory: usage 307200kB, limit 307200kB, failcnt 72372 [ 3370.726866][T21247] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3370.733868][T21247] Memory cgroup stats for /syz2: [ 3370.734130][T21247] anon 94208 [ 3370.734130][T21247] file 368640 [ 3370.734130][T21247] kernel 314093568 [ 3370.734130][T21247] kernel_stack 65536 [ 3370.734130][T21247] pagetables 69632 [ 3370.734130][T21247] sec_pagetables 0 [ 3370.734130][T21247] percpu 5428704 [ 3370.734130][T21247] sock 0 [ 3370.734130][T21247] vmalloc 0 [ 3370.734130][T21247] shmem 348160 [ 3370.734130][T21247] zswap 0 [ 3370.734130][T21247] zswapped 0 [ 3370.734130][T21247] file_mapped 311296 [ 3370.734130][T21247] file_dirty 12288 [ 3370.734130][T21247] file_writeback 0 [ 3370.734130][T21247] swapcached 0 [ 3370.734130][T21247] anon_thp 0 [ 3370.734130][T21247] file_thp 0 [ 3370.734130][T21247] shmem_thp 0 [ 3370.734130][T21247] inactive_anon 28672 [ 3370.734130][T21247] active_anon 413696 [ 3370.734130][T21247] inactive_file 0 [ 3370.734130][T21247] active_file 20480 [ 3370.734130][T21247] unevictable 0 [ 3370.734130][T21247] slab_reclaimable 216464 [ 3370.734130][T21247] slab_unreclaimable 308288200 [ 3370.734130][T21247] slab 308504664 [ 3370.734130][T21247] workingset_refault_anon 0 [ 3370.734130][T21247] workingset_refault_file 0 [ 3370.734130][T21247] workingset_activate_anon 0 [ 3370.734130][T21247] workingset_activate_file 0 [ 3370.734130][T21247] workingset_restore_anon 0 [ 3370.734130][T21247] workingset_restore_file 0 [ 3370.734130][T21247] workingset_nodereclaim 0 [ 3370.734130][T21247] pgscan 55701 [ 3370.734130][T21247] pgsteal 468 [ 3370.734130][T21247] pgscan_kswapd 0 [ 3370.734130][T21247] pgscan_direct 55701 [ 3370.734130][T21247] pgscan_khugepaged 0 [ 3370.734130][T21247] pgsteal_kswapd 0 [ 3370.734130][T21247] pgsteal_direct 468 [ 3370.734130][T21247] pgsteal_khugepaged 0 [ 3370.734130][T21247] pgfault 422107 [ 3370.734130][T21247] pgmajfault 1 [ 3370.734130][T21247] pgrefill 185667 [ 3370.734130][T21247] pgactivate 55194 [ 3370.734130][T21247] pgdeactivate 0 [ 3370.734130][T21247] pglazyfree 0 [ 3370.734130][T21247] pglazyfreed 0 [ 3370.734130][T21247] zswpin 0 [ 3370.734130][T21247] zswpout 0 08:19:37 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4c510300) [ 3370.924269][T21247] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21245,uid=0 [ 3370.940420][T21247] Memory cgroup out of memory: Killed process 21245 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3370.958613][T21248] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3370.981101][T21248] CPU: 1 PID: 21248 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3370.991621][T21248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3371.001740][T21248] Call Trace: [ 3371.005066][T21248] [ 3371.008043][T21248] dump_stack_lvl+0x136/0x150 [ 3371.012791][T21248] dump_header+0x10a/0xd70 [ 3371.017277][T21248] oom_kill_process+0x25d/0x600 [ 3371.022199][T21248] out_of_memory+0x35c/0x1660 [ 3371.026954][T21248] ? oom_killer_disable+0x2b0/0x2b0 [ 3371.032223][T21248] ? rcu_read_unlock+0x9/0x60 [ 3371.036984][T21248] ? find_held_lock+0x2d/0x110 [ 3371.041799][T21248] mem_cgroup_out_of_memory+0x206/0x270 [ 3371.047390][T21248] ? mem_cgroup_margin+0x130/0x130 [ 3371.052547][T21248] ? lock_downgrade+0x690/0x690 [ 3371.057498][T21248] try_charge_memcg+0xf9b/0x13b0 [ 3371.062506][T21248] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3371.068533][T21248] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3371.074318][T21248] ? lock_downgrade+0x690/0x690 [ 3371.079217][T21248] ? lock_downgrade+0x690/0x690 [ 3371.084461][T21248] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3371.090166][T21248] __alloc_pages+0x1f3/0x4a0 [ 3371.094789][T21248] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3371.101584][T21248] ? print_usage_bug.part.0+0x660/0x660 [ 3371.107172][T21248] ? find_held_lock+0x2d/0x110 [ 3371.111989][T21248] alloc_pages+0x1aa/0x270 [ 3371.116472][T21248] pte_alloc_one+0x1a/0x230 [ 3371.121074][T21248] __pte_alloc+0x6d/0x260 [ 3371.125435][T21248] ? pmd_install+0x160/0x160 [ 3371.130168][T21248] ? _raw_spin_unlock+0x28/0x40 [ 3371.135068][T21248] ? __pmd_alloc+0x30c/0x5d0 [ 3371.139722][T21248] __handle_mm_fault+0x3626/0x3e60 [ 3371.144905][T21248] ? vm_iomap_memory+0x190/0x190 [ 3371.149935][T21248] handle_mm_fault+0x2ba/0x9c0 [ 3371.154766][T21248] do_user_addr_fault+0x475/0x1230 [ 3371.159964][T21248] ? rcu_is_watching+0x12/0xb0 [ 3371.164791][T21248] exc_page_fault+0x98/0x170 [ 3371.169421][T21248] asm_exc_page_fault+0x26/0x30 [ 3371.174311][T21248] RIP: 0033:0x7f79ea82bde9 [ 3371.178775][T21248] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3371.198412][T21248] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3371.204504][T21248] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3371.212510][T21248] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3371.220510][T21248] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3371.228525][T21248] R10: 00007f79ea400068 R11: 0000000000000246 R12: 0000000000336273 [ 3371.236545][T21248] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3371.244577][T21248] [ 3371.254037][T21248] memory: usage 307200kB, limit 307200kB, failcnt 78842 [ 3371.261418][T21248] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3371.268767][T21248] Memory cgroup stats for /syz4: [ 3371.269022][T21248] anon 135168 [ 3371.269022][T21248] file 315392 [ 3371.269022][T21248] kernel 314105856 [ 3371.269022][T21248] kernel_stack 65536 [ 3371.269022][T21248] pagetables 73728 [ 3371.269022][T21248] sec_pagetables 0 [ 3371.269022][T21248] percpu 5432256 [ 3371.269022][T21248] sock 0 [ 3371.269022][T21248] vmalloc 0 [ 3371.269022][T21248] shmem 311296 [ 3371.269022][T21248] zswap 0 [ 3371.269022][T21248] zswapped 0 [ 3371.269022][T21248] file_mapped 311296 [ 3371.269022][T21248] file_dirty 4096 [ 3371.269022][T21248] file_writeback 0 [ 3371.269022][T21248] swapcached 0 [ 3371.269022][T21248] anon_thp 0 [ 3371.269022][T21248] file_thp 0 [ 3371.269022][T21248] shmem_thp 0 [ 3371.269022][T21248] inactive_anon 69632 [ 3371.269022][T21248] active_anon 376832 [ 3371.269022][T21248] inactive_file 0 [ 3371.269022][T21248] active_file 4096 [ 3371.269022][T21248] unevictable 0 [ 3371.269022][T21248] slab_reclaimable 16680 [ 3371.269022][T21248] slab_unreclaimable 308489216 [ 3371.269022][T21248] slab 308505896 [ 3371.269022][T21248] workingset_refault_anon 0 [ 3371.269022][T21248] workingset_refault_file 0 [ 3371.269022][T21248] workingset_activate_anon 0 [ 3371.269022][T21248] workingset_activate_file 0 [ 3371.269022][T21248] workingset_restore_anon 0 [ 3371.269022][T21248] workingset_restore_file 0 [ 3371.269022][T21248] workingset_nodereclaim 0 [ 3371.269022][T21248] pgscan 50894 [ 3371.269022][T21248] pgsteal 496 [ 3371.269022][T21248] pgscan_kswapd 0 [ 3371.269022][T21248] pgscan_direct 50894 [ 3371.269022][T21248] pgscan_khugepaged 0 [ 3371.269022][T21248] pgsteal_kswapd 0 [ 3371.269022][T21248] pgsteal_direct 496 [ 3371.269022][T21248] pgsteal_khugepaged 0 [ 3371.269022][T21248] pgfault 405474 [ 3371.269022][T21248] pgmajfault 1 [ 3371.269022][T21248] pgrefill 140832 [ 3371.269022][T21248] pgactivate 50337 [ 3371.269022][T21248] pgdeactivate 0 [ 3371.269022][T21248] pglazyfree 0 [ 3371.269022][T21248] pglazyfreed 0 [ 3371.269022][T21248] zswpin 0 [ 3371.269022][T21248] zswpout 0 [ 3371.460603][T21248] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21248,uid=0 08:19:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r1, 0x0, 0x4ff9c, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/84, 0x54}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000000)) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r1, 0x0, r1, 0x0, 0x4ff9c, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/84, 0x54}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) 08:19:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdb53030000000000) [ 3371.482416][T21248] Memory cgroup out of memory: Killed process 21248 (syz-executor.4) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3371.569270][T21253] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3371.612440][T21253] CPU: 0 PID: 21253 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3371.622956][T21253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3371.633084][T21253] Call Trace: [ 3371.636412][T21253] [ 3371.639419][T21253] dump_stack_lvl+0x136/0x150 [ 3371.644192][T21253] dump_header+0x10a/0xd70 [ 3371.648688][T21253] oom_kill_process+0x25d/0x600 [ 3371.653619][T21253] out_of_memory+0x35c/0x1660 [ 3371.658377][T21253] ? find_held_lock+0x2d/0x110 [ 3371.663228][T21253] ? oom_killer_disable+0x2b0/0x2b0 [ 3371.668506][T21253] ? rcu_read_unlock+0x9/0x60 [ 3371.673296][T21253] ? find_held_lock+0x2d/0x110 [ 3371.678160][T21253] mem_cgroup_out_of_memory+0x206/0x270 [ 3371.683790][T21253] ? mem_cgroup_margin+0x130/0x130 [ 3371.689070][T21253] ? lock_downgrade+0x690/0x690 [ 3371.694014][T21253] try_charge_memcg+0xf9b/0x13b0 [ 3371.699023][T21253] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3371.705074][T21253] ? rcu_read_unlock+0x9/0x60 [ 3371.709820][T21253] ? lock_downgrade+0x690/0x690 [ 3371.714762][T21253] charge_memcg+0x90/0x3b0 [ 3371.719245][T21253] __mem_cgroup_charge+0x2b/0x90 [ 3371.724234][T21253] ? copy_mc_to_kernel+0x3e/0x90 [ 3371.729224][T21253] do_wp_page+0x8eb/0x3520 [ 3371.733684][T21253] ? lock_release+0x670/0x670 [ 3371.738395][T21253] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3371.743805][T21253] ? do_raw_spin_lock+0x124/0x2b0 [ 3371.748867][T21253] ? spin_bug+0x1c0/0x1c0 [ 3371.753241][T21253] ? lock_downgrade+0x690/0x690 [ 3371.758140][T21253] __handle_mm_fault+0x19a1/0x3e60 [ 3371.763299][T21253] ? vm_iomap_memory+0x190/0x190 [ 3371.768302][T21253] handle_mm_fault+0x2ba/0x9c0 [ 3371.773117][T21253] do_user_addr_fault+0x475/0x1230 [ 3371.778279][T21253] ? rcu_is_watching+0x12/0xb0 [ 3371.783102][T21253] exc_page_fault+0x98/0x170 [ 3371.787738][T21253] asm_exc_page_fault+0x26/0x30 [ 3371.792627][T21253] RIP: 0033:0x7f0e44a366e5 [ 3371.797134][T21253] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3371.816822][T21253] RSP: 002b:00007ffc44a97920 EFLAGS: 00010206 [ 3371.822918][T21253] RAX: 0000000000000003 RBX: 00007f0e44babf80 RCX: 00007f0e44ba80c0 [ 3371.830920][T21253] RDX: 00007f0e44ba80c0 RSI: 0000000000000080 RDI: 00007f0e44babf80 [ 3371.838924][T21253] RBP: 00007f0e44babf80 R08: 00007ffc44a9a080 R09: 0000000000000000 [ 3371.846927][T21253] R10: 00007ffc44a97a30 R11: 0000000000000246 R12: 0000000000336af9 [ 3371.854950][T21253] R13: 00007ffc44a97a30 R14: 00007f0e44babf80 R15: 0000000000000032 [ 3371.862970][T21253] [ 3371.878081][T21253] memory: usage 307200kB, limit 307200kB, failcnt 75491 [ 3371.898482][T21253] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3371.922994][T21253] Memory cgroup stats for /syz5: [ 3371.923282][T21253] anon 94208 [ 3371.923282][T21253] file 348160 [ 3371.923282][T21253] kernel 314130432 [ 3371.923282][T21253] kernel_stack 65536 [ 3371.923282][T21253] pagetables 73728 [ 3371.923282][T21253] sec_pagetables 0 [ 3371.923282][T21253] percpu 5432752 [ 3371.923282][T21253] sock 0 [ 3371.923282][T21253] vmalloc 20480 [ 3371.923282][T21253] shmem 344064 [ 3371.923282][T21253] zswap 0 [ 3371.923282][T21253] zswapped 0 [ 3371.923282][T21253] file_mapped 327680 [ 3371.923282][T21253] file_dirty 0 [ 3371.923282][T21253] file_writeback 0 [ 3371.923282][T21253] swapcached 0 [ 3371.923282][T21253] anon_thp 0 [ 3371.923282][T21253] file_thp 0 [ 3371.923282][T21253] shmem_thp 0 [ 3371.923282][T21253] inactive_anon 32768 [ 3371.923282][T21253] active_anon 405504 [ 3371.923282][T21253] inactive_file 4096 [ 3371.923282][T21253] active_file 0 [ 3371.923282][T21253] unevictable 0 [ 3371.923282][T21253] slab_reclaimable 14160 [ 3371.923282][T21253] slab_unreclaimable 308488264 [ 3371.923282][T21253] slab 308502424 [ 3371.923282][T21253] workingset_refault_anon 0 [ 3371.923282][T21253] workingset_refault_file 1 [ 3371.923282][T21253] workingset_activate_anon 0 [ 3371.923282][T21253] workingset_activate_file 0 [ 3371.923282][T21253] workingset_restore_anon 0 [ 3371.923282][T21253] workingset_restore_file 0 [ 3371.923282][T21253] workingset_nodereclaim 0 [ 3371.923282][T21253] pgscan 43763 [ 3371.923282][T21253] pgsteal 461 [ 3371.923282][T21253] pgscan_kswapd 0 [ 3371.923282][T21253] pgscan_direct 43763 [ 3371.923282][T21253] pgscan_khugepaged 0 [ 3371.923282][T21253] pgsteal_kswapd 0 [ 3371.923282][T21253] pgsteal_direct 461 [ 3371.923282][T21253] pgsteal_khugepaged 0 [ 3371.923282][T21253] pgfault 412483 [ 3371.923282][T21253] pgmajfault 0 [ 3371.923282][T21253] pgrefill 143856 [ 3371.923282][T21253] pgactivate 43287 [ 3371.923282][T21253] pgdeactivate 0 [ 3371.923282][T21253] pglazyfree 0 [ 3371.923282][T21253] pglazyfreed 0 [ 3371.923282][T21253] zswpin 0 [ 3371.923282][T21253] zswpout 0 [ 3372.122943][T21253] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21253,uid=0 [ 3372.140598][T21253] Memory cgroup out of memory: Killed process 21253 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3372.159074][T21256] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 08:19:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xe4ffffff) [ 3372.175869][T21256] CPU: 1 PID: 21256 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3372.186366][T21256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3372.196487][T21256] Call Trace: [ 3372.199896][T21256] [ 3372.202883][T21256] dump_stack_lvl+0x136/0x150 [ 3372.207631][T21256] dump_header+0x10a/0xd70 [ 3372.212134][T21256] oom_kill_process+0x25d/0x600 [ 3372.217061][T21256] out_of_memory+0x35c/0x1660 [ 3372.221832][T21256] ? oom_killer_disable+0x2b0/0x2b0 [ 3372.227115][T21256] ? rcu_read_unlock+0x9/0x60 [ 3372.231866][T21256] ? find_held_lock+0x2d/0x110 [ 3372.236723][T21256] mem_cgroup_out_of_memory+0x206/0x270 [ 3372.242396][T21256] ? mem_cgroup_margin+0x130/0x130 [ 3372.247669][T21256] ? lock_downgrade+0x690/0x690 [ 3372.252696][T21256] try_charge_memcg+0xf9b/0x13b0 [ 3372.257712][T21256] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3372.263766][T21256] ? rcu_read_unlock+0x9/0x60 [ 3372.268603][T21256] ? lock_downgrade+0x690/0x690 [ 3372.273536][T21256] charge_memcg+0x90/0x3b0 [ 3372.278033][T21256] __mem_cgroup_charge+0x2b/0x90 [ 3372.283005][T21256] ? copy_mc_to_kernel+0x3e/0x90 [ 3372.287994][T21256] do_wp_page+0x8eb/0x3520 [ 3372.292464][T21256] ? lock_release+0x670/0x670 [ 3372.297280][T21256] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3372.302698][T21256] ? do_raw_spin_lock+0x124/0x2b0 [ 3372.307767][T21256] ? spin_bug+0x1c0/0x1c0 [ 3372.312142][T21256] ? lock_downgrade+0x690/0x690 [ 3372.317038][T21256] __handle_mm_fault+0x19a1/0x3e60 [ 3372.322285][T21256] ? vm_iomap_memory+0x190/0x190 [ 3372.327292][T21256] handle_mm_fault+0x2ba/0x9c0 [ 3372.332104][T21256] do_user_addr_fault+0x475/0x1230 [ 3372.337288][T21256] ? rcu_is_watching+0x12/0xb0 [ 3372.342100][T21256] exc_page_fault+0x98/0x170 [ 3372.346747][T21256] asm_exc_page_fault+0x26/0x30 [ 3372.351721][T21256] RIP: 0033:0x7f9ac62366e5 [ 3372.356186][T21256] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3372.375832][T21256] RSP: 002b:00007ffc61d0e9d0 EFLAGS: 00010206 [ 3372.381931][T21256] RAX: 0000000000000003 RBX: 00007f9ac63abf80 RCX: 00007f9ac63a80c0 [ 3372.389931][T21256] RDX: 00007f9ac63a80c0 RSI: 0000000000000080 RDI: 00007f9ac63abf80 [ 3372.397930][T21256] RBP: 00007f9ac63abf80 R08: 00007ffc61d6c080 R09: 0000000000000000 [ 3372.405930][T21256] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 0000000000336b12 [ 3372.413927][T21256] R13: 00007ffc61d0eae0 R14: 00007f9ac63abf80 R15: 0000000000000032 [ 3372.421954][T21256] 08:19:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x80000000008000) [ 3372.435747][T21256] memory: usage 307200kB, limit 307200kB, failcnt 72462 [ 3372.444755][T21256] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3372.452495][T21256] Memory cgroup stats for /syz2: [ 3372.452751][T21256] anon 94208 [ 3372.452751][T21256] file 368640 [ 3372.452751][T21256] kernel 314109952 [ 3372.452751][T21256] kernel_stack 65536 [ 3372.452751][T21256] pagetables 69632 [ 3372.452751][T21256] sec_pagetables 0 [ 3372.452751][T21256] percpu 5428768 [ 3372.452751][T21256] sock 0 [ 3372.452751][T21256] vmalloc 0 [ 3372.452751][T21256] shmem 348160 [ 3372.452751][T21256] zswap 0 [ 3372.452751][T21256] zswapped 0 [ 3372.452751][T21256] file_mapped 311296 [ 3372.452751][T21256] file_dirty 12288 [ 3372.452751][T21256] file_writeback 0 [ 3372.452751][T21256] swapcached 0 [ 3372.452751][T21256] anon_thp 0 [ 3372.452751][T21256] file_thp 0 [ 3372.452751][T21256] shmem_thp 0 [ 3372.452751][T21256] inactive_anon 28672 [ 3372.452751][T21256] active_anon 413696 [ 3372.452751][T21256] inactive_file 0 [ 3372.452751][T21256] active_file 20480 [ 3372.452751][T21256] unevictable 0 [ 3372.452751][T21256] slab_reclaimable 218392 [ 3372.452751][T21256] slab_unreclaimable 308298080 [ 3372.452751][T21256] slab 308516472 [ 3372.452751][T21256] workingset_refault_anon 0 [ 3372.452751][T21256] workingset_refault_file 0 [ 3372.452751][T21256] workingset_activate_anon 0 [ 3372.452751][T21256] workingset_activate_file 0 [ 3372.452751][T21256] workingset_restore_anon 0 [ 3372.452751][T21256] workingset_restore_file 0 [ 3372.452751][T21256] workingset_nodereclaim 0 [ 3372.452751][T21256] pgscan 55825 [ 3372.452751][T21256] pgsteal 468 [ 3372.452751][T21256] pgscan_kswapd 0 [ 3372.452751][T21256] pgscan_direct 55825 [ 3372.452751][T21256] pgscan_khugepaged 0 [ 3372.452751][T21256] pgsteal_kswapd 0 [ 3372.452751][T21256] pgsteal_direct 468 [ 3372.452751][T21256] pgsteal_khugepaged 0 [ 3372.452751][T21256] pgfault 422149 [ 3372.452751][T21256] pgmajfault 1 [ 3372.452751][T21256] pgrefill 185976 [ 3372.452751][T21256] pgactivate 55318 [ 3372.452751][T21256] pgdeactivate 0 [ 3372.452751][T21256] pglazyfree 0 [ 3372.452751][T21256] pglazyfreed 0 [ 3372.452751][T21256] zswpin 0 [ 3372.452751][T21256] zswpout 0 [ 3372.646941][T21256] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21256,uid=0 [ 3372.662876][T21256] Memory cgroup out of memory: Killed process 21256 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:39 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4d510300) [ 3372.680758][T21255] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3372.691067][T21255] CPU: 1 PID: 21255 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3372.701533][T21255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3372.711643][T21255] Call Trace: [ 3372.714961][T21255] [ 3372.717936][T21255] dump_stack_lvl+0x136/0x150 [ 3372.722681][T21255] dump_header+0x10a/0xd70 [ 3372.727197][T21255] oom_kill_process+0x25d/0x600 [ 3372.732310][T21255] out_of_memory+0x35c/0x1660 [ 3372.737151][T21255] ? oom_killer_disable+0x2b0/0x2b0 [ 3372.742416][T21255] ? rcu_read_unlock+0x9/0x60 [ 3372.747152][T21255] ? find_held_lock+0x2d/0x110 [ 3372.751971][T21255] mem_cgroup_out_of_memory+0x206/0x270 [ 3372.757657][T21255] ? mem_cgroup_margin+0x130/0x130 [ 3372.762808][T21255] ? lock_downgrade+0x690/0x690 [ 3372.767705][T21255] try_charge_memcg+0xf9b/0x13b0 [ 3372.772678][T21255] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3372.778777][T21255] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3372.784632][T21255] ? lock_downgrade+0x690/0x690 [ 3372.789529][T21255] ? lock_downgrade+0x690/0x690 [ 3372.794442][T21255] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3372.800036][T21255] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3372.806234][T21255] copy_process+0x4e3/0x7590 [ 3372.810892][T21255] ? __lock_acquire+0xbc5/0x5d40 [ 3372.815871][T21255] ? __cleanup_sighand+0xb0/0xb0 [ 3372.820875][T21255] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3372.826900][T21255] ? psi_memstall_leave+0x174/0x250 [ 3372.832138][T21255] ? lock_downgrade+0x690/0x690 [ 3372.837072][T21255] kernel_clone+0xeb/0x890 [ 3372.841587][T21255] ? create_io_thread+0xf0/0xf0 [ 3372.846493][T21255] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3372.852789][T21255] ? lock_downgrade+0x690/0x690 [ 3372.857688][T21255] __do_sys_clone+0xba/0x100 [ 3372.862317][T21255] ? kernel_clone+0x890/0x890 [ 3372.867044][T21255] ? syscall_enter_from_user_mode+0x26/0x80 [ 3372.873155][T21255] do_syscall_64+0x39/0xb0 [ 3372.877643][T21255] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3372.883594][T21255] RIP: 0033:0x7faa0ba8d591 [ 3372.888038][T21255] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3372.907682][T21255] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3372.916131][T21255] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3372.924148][T21255] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3372.932167][T21255] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3372.940186][T21255] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3372.948188][T21255] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3372.956204][T21255] [ 3372.966268][T21255] memory: usage 307200kB, limit 307200kB, failcnt 96262 [ 3372.976386][T21255] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3372.988639][T21255] Memory cgroup stats for /syz1: [ 3372.988901][T21255] anon 102400 [ 3372.988901][T21255] file 356352 [ 3372.988901][T21255] kernel 314097664 [ 3372.988901][T21255] kernel_stack 65536 [ 3372.988901][T21255] pagetables 81920 [ 3372.988901][T21255] sec_pagetables 0 [ 3372.988901][T21255] percpu 5423968 [ 3372.988901][T21255] sock 0 [ 3372.988901][T21255] vmalloc 24576 [ 3372.988901][T21255] shmem 339968 [ 3372.988901][T21255] zswap 0 [ 3372.988901][T21255] zswapped 0 [ 3372.988901][T21255] file_mapped 262144 [ 3372.988901][T21255] file_dirty 12288 [ 3372.988901][T21255] file_writeback 0 [ 3372.988901][T21255] swapcached 0 [ 3372.988901][T21255] anon_thp 0 [ 3372.988901][T21255] file_thp 0 [ 3372.988901][T21255] shmem_thp 0 [ 3372.988901][T21255] inactive_anon 40960 [ 3372.988901][T21255] active_anon 401408 [ 3372.988901][T21255] inactive_file 0 [ 3372.988901][T21255] active_file 16384 [ 3372.988901][T21255] unevictable 0 [ 3372.988901][T21255] slab_reclaimable 245608 [ 3372.988901][T21255] slab_unreclaimable 308226616 [ 3372.988901][T21255] slab 308472224 [ 3372.988901][T21255] workingset_refault_anon 0 [ 3372.988901][T21255] workingset_refault_file 4 [ 3372.988901][T21255] workingset_activate_anon 0 [ 3372.988901][T21255] workingset_activate_file 0 [ 3372.988901][T21255] workingset_restore_anon 0 [ 3372.988901][T21255] workingset_restore_file 2 [ 3372.988901][T21255] workingset_nodereclaim 0 [ 3372.988901][T21255] pgscan 80226 [ 3372.988901][T21255] pgsteal 606 [ 3372.988901][T21255] pgscan_kswapd 0 [ 3372.988901][T21255] pgscan_direct 80226 [ 3372.988901][T21255] pgscan_khugepaged 0 [ 3372.988901][T21255] pgsteal_kswapd 0 [ 3372.988901][T21255] pgsteal_direct 606 [ 3372.988901][T21255] pgsteal_khugepaged 0 [ 3372.988901][T21255] pgfault 410470 [ 3372.988901][T21255] pgmajfault 0 [ 3372.988901][T21255] pgrefill 219763 [ 3372.988901][T21255] pgactivate 79527 [ 3372.988901][T21255] pgdeactivate 0 [ 3372.988901][T21255] pglazyfree 0 [ 3372.988901][T21255] pglazyfreed 0 [ 3372.988901][T21255] zswpin 0 [ 3372.988901][T21255] zswpout 0 08:19:39 executing program 1: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="0f4f5646c031a91328cd3022583cb38c9b34c8ec0cb7e8e71be040d6b8c4941da36ede12e04537720b2bb39bee1d7bd59fb691e21ce80335d0690caec0d66fded9de24763e4e2afa167c1aa9e47f2a56dbd4765f988db57c638d07e8a117434caf1f0c5ea58ad1eb35861da19929c25b523b867a4e1a96bf6f5f4e48e77f52293051967a8ab17dce662df0a696cb1541ab606fd07b3235cb9d35afe459e52ae35253769ce443fd98917b4ccacc6f2dc2075f39f0306cbf650d17263d7f17304d7c42bd4a7f219658f08f87c35797213c56d4ea7dc8f50da6aa2d79fdd27714a1c6518bc84ffb6dd08c9d0218182f", 0xee, 0x4000000, &(0x7f0000000140)=@in6={0x21, 0x11, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private1, 0xfffffffd}}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x603, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x4}, [@RTA_GATEWAY={0x8, 0x16, @loopback}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x4ff9c, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='#\x00', 0x2) [ 3373.212055][T21255] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21255,uid=0 [ 3373.230387][T21255] Memory cgroup out of memory: Killed process 21255 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3373.277824][T21262] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3373.318105][T21262] CPU: 1 PID: 21262 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3373.328608][T21262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3373.338715][T21262] Call Trace: [ 3373.342040][T21262] [ 3373.345015][T21262] dump_stack_lvl+0x136/0x150 [ 3373.349761][T21262] dump_header+0x10a/0xd70 [ 3373.354281][T21262] oom_kill_process+0x25d/0x600 [ 3373.359198][T21262] out_of_memory+0x35c/0x1660 [ 3373.363947][T21262] ? find_held_lock+0x2d/0x110 [ 3373.368793][T21262] ? oom_killer_disable+0x2b0/0x2b0 [ 3373.374073][T21262] ? rcu_read_unlock+0x9/0x60 [ 3373.378823][T21262] ? find_held_lock+0x2d/0x110 [ 3373.383666][T21262] mem_cgroup_out_of_memory+0x206/0x270 [ 3373.389284][T21262] ? mem_cgroup_margin+0x130/0x130 [ 3373.394466][T21262] ? lock_downgrade+0x690/0x690 [ 3373.399397][T21262] try_charge_memcg+0xf9b/0x13b0 [ 3373.404401][T21262] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3373.410437][T21262] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3373.416231][T21262] ? lock_downgrade+0x690/0x690 [ 3373.421151][T21262] ? lock_downgrade+0x690/0x690 [ 3373.426077][T21262] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3373.431775][T21262] __alloc_pages+0x1f3/0x4a0 [ 3373.436431][T21262] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3373.443265][T21262] ? __lock_acquire+0xbc5/0x5d40 [ 3373.448285][T21262] alloc_pages+0x1aa/0x270 [ 3373.452787][T21262] __pmd_alloc+0x3f/0x5d0 [ 3373.457184][T21262] __handle_mm_fault+0x932/0x3e60 [ 3373.462279][T21262] ? vm_iomap_memory+0x190/0x190 [ 3373.467309][T21262] handle_mm_fault+0x2ba/0x9c0 [ 3373.472189][T21262] do_user_addr_fault+0x475/0x1230 [ 3373.477463][T21262] ? rcu_is_watching+0x12/0xb0 [ 3373.482293][T21262] exc_page_fault+0x98/0x170 [ 3373.486948][T21262] asm_exc_page_fault+0x26/0x30 [ 3373.491950][T21262] RIP: 0033:0x7f79ea82bde9 [ 3373.496442][T21262] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 08:19:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf0ffffffffffff) [ 3373.516112][T21262] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3373.522233][T21262] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3373.530258][T21262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3373.538283][T21262] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3373.546341][T21262] R10: 00007f79ea400068 R11: 0000000000000246 R12: 0000000000336b8c [ 3373.554469][T21262] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3373.562515][T21262] [ 3373.606045][T21262] memory: usage 307184kB, limit 307200kB, failcnt 78943 [ 3373.617402][T21262] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3373.624850][T21262] Memory cgroup stats for /syz4: [ 3373.625120][T21262] anon 135168 [ 3373.625120][T21262] file 319488 [ 3373.625120][T21262] kernel 314101760 [ 3373.625120][T21262] kernel_stack 65536 [ 3373.625120][T21262] pagetables 69632 [ 3373.625120][T21262] sec_pagetables 0 [ 3373.625120][T21262] percpu 5432256 [ 3373.625120][T21262] sock 0 [ 3373.625120][T21262] vmalloc 0 [ 3373.625120][T21262] shmem 311296 [ 3373.625120][T21262] zswap 0 [ 3373.625120][T21262] zswapped 0 [ 3373.625120][T21262] file_mapped 311296 [ 3373.625120][T21262] file_dirty 4096 [ 3373.625120][T21262] file_writeback 0 [ 3373.625120][T21262] swapcached 0 [ 3373.625120][T21262] anon_thp 0 [ 3373.625120][T21262] file_thp 0 [ 3373.625120][T21262] shmem_thp 0 [ 3373.625120][T21262] inactive_anon 53248 [ 3373.625120][T21262] active_anon 393216 [ 3373.625120][T21262] inactive_file 8192 [ 3373.625120][T21262] active_file 0 [ 3373.625120][T21262] unevictable 0 [ 3373.625120][T21262] slab_reclaimable 16920 [ 3373.625120][T21262] slab_unreclaimable 308486536 [ 3373.625120][T21262] slab 308503456 [ 3373.625120][T21262] workingset_refault_anon 0 [ 3373.625120][T21262] workingset_refault_file 0 [ 3373.625120][T21262] workingset_activate_anon 0 [ 3373.625120][T21262] workingset_activate_file 0 [ 3373.625120][T21262] workingset_restore_anon 0 [ 3373.625120][T21262] workingset_restore_file 0 [ 3373.625120][T21262] workingset_nodereclaim 0 [ 3373.625120][T21262] pgscan 50929 [ 3373.625120][T21262] pgsteal 496 [ 3373.625120][T21262] pgscan_kswapd 0 [ 3373.625120][T21262] pgscan_direct 50929 [ 3373.625120][T21262] pgscan_khugepaged 0 [ 3373.625120][T21262] pgsteal_kswapd 0 [ 3373.625120][T21262] pgsteal_direct 496 [ 3373.625120][T21262] pgsteal_khugepaged 0 [ 3373.625120][T21262] pgfault 405534 [ 3373.625120][T21262] pgmajfault 1 [ 3373.625120][T21262] pgrefill 140902 [ 3373.625120][T21262] pgactivate 50372 [ 3373.625120][T21262] pgdeactivate 0 [ 3373.625120][T21262] pglazyfree 0 [ 3373.625120][T21262] pglazyfreed 0 [ 3373.625120][T21262] zswpin 0 [ 3373.625120][T21262] zswpout 0 [ 3373.818095][T21262] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21262,uid=0 [ 3373.836309][T21262] Memory cgroup out of memory: Killed process 21262 (syz-executor.4) total-vm:54548kB, anon-rss:508kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 08:19:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdc03000000000000) [ 3373.854976][T21270] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3373.873350][T21270] CPU: 1 PID: 21270 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3373.883853][T21270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3373.893956][T21270] Call Trace: [ 3373.897326][T21270] [ 3373.900301][T21270] dump_stack_lvl+0x136/0x150 [ 3373.905050][T21270] dump_header+0x10a/0xd70 [ 3373.909550][T21270] oom_kill_process+0x25d/0x600 [ 3373.914476][T21270] out_of_memory+0x35c/0x1660 [ 3373.919276][T21270] ? oom_killer_disable+0x2b0/0x2b0 [ 3373.924562][T21270] ? rcu_read_unlock+0x9/0x60 [ 3373.929291][T21270] ? find_held_lock+0x2d/0x110 [ 3373.934132][T21270] mem_cgroup_out_of_memory+0x206/0x270 [ 3373.939750][T21270] ? mem_cgroup_margin+0x130/0x130 [ 3373.944957][T21270] ? lock_downgrade+0x690/0x690 [ 3373.949882][T21270] try_charge_memcg+0xf9b/0x13b0 [ 3373.954901][T21270] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3373.960936][T21270] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3373.966748][T21270] ? lock_downgrade+0x690/0x690 [ 3373.971659][T21270] ? lock_downgrade+0x690/0x690 [ 3373.976572][T21270] obj_cgroup_charge+0x2af/0x5e0 [ 3373.981562][T21270] ? sock_alloc_inode+0x27/0x1d0 [ 3373.986560][T21270] kmem_cache_alloc_lru+0x142/0x600 [ 3373.991827][T21270] sock_alloc_inode+0x27/0x1d0 [ 3373.996633][T21270] ? sock_free_inode+0x30/0x30 [ 3374.001435][T21270] alloc_inode+0x61/0x230 [ 3374.005807][T21270] new_inode_pseudo+0x17/0x80 [ 3374.010529][T21270] sock_alloc+0x40/0x270 [ 3374.014809][T21270] __sock_create+0xbd/0x850 [ 3374.019371][T21270] __sys_socket+0x133/0x250 [ 3374.023924][T21270] ? __sys_socket_file+0x1d0/0x1d0 [ 3374.029101][T21270] ? kcov_ioctl+0x384/0x6f0 [ 3374.033644][T21270] __x64_sys_socket+0x73/0xb0 [ 3374.038387][T21270] do_syscall_64+0x39/0xb0 [ 3374.042862][T21270] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.048800][T21270] RIP: 0033:0x7f9ac628c169 [ 3374.053268][T21270] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3374.072919][T21270] RSP: 002b:00007f9ac6f61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3374.081403][T21270] RAX: ffffffffffffffda RBX: 00007f9ac63abf80 RCX: 00007f9ac628c169 [ 3374.089400][T21270] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3374.097400][T21270] RBP: 00007f9ac62e7ca1 R08: 0000000000000000 R09: 0000000000000000 08:19:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x100000000000000) [ 3374.105400][T21270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3374.113396][T21270] R13: 00007ffc61d0e97f R14: 00007f9ac6f61300 R15: 0000000000022000 [ 3374.121452][T21270] [ 3374.128651][T21270] memory: usage 307200kB, limit 307200kB, failcnt 72569 [ 3374.147399][T21270] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3374.169995][T21270] Memory cgroup stats for /syz2: [ 3374.170384][T21270] anon 90112 [ 3374.170384][T21270] file 372736 [ 3374.170384][T21270] kernel 314109952 [ 3374.170384][T21270] kernel_stack 65536 [ 3374.170384][T21270] pagetables 69632 [ 3374.170384][T21270] sec_pagetables 0 [ 3374.170384][T21270] percpu 5428768 [ 3374.170384][T21270] sock 0 [ 3374.170384][T21270] vmalloc 0 [ 3374.170384][T21270] shmem 348160 [ 3374.170384][T21270] zswap 0 [ 3374.170384][T21270] zswapped 0 [ 3374.170384][T21270] file_mapped 311296 [ 3374.170384][T21270] file_dirty 16384 [ 3374.170384][T21270] file_writeback 0 [ 3374.170384][T21270] swapcached 0 [ 3374.170384][T21270] anon_thp 0 [ 3374.170384][T21270] file_thp 0 [ 3374.170384][T21270] shmem_thp 0 [ 3374.170384][T21270] inactive_anon 397312 [ 3374.170384][T21270] active_anon 40960 [ 3374.170384][T21270] inactive_file 0 [ 3374.170384][T21270] active_file 24576 [ 3374.170384][T21270] unevictable 0 [ 3374.170384][T21270] slab_reclaimable 216704 [ 3374.170384][T21270] slab_unreclaimable 308297432 [ 3374.170384][T21270] slab 308514136 [ 3374.170384][T21270] workingset_refault_anon 0 [ 3374.170384][T21270] workingset_refault_file 0 [ 3374.170384][T21270] workingset_activate_anon 0 [ 3374.170384][T21270] workingset_activate_file 0 [ 3374.170384][T21270] workingset_restore_anon 0 [ 3374.170384][T21270] workingset_restore_file 0 [ 3374.170384][T21270] workingset_nodereclaim 0 [ 3374.170384][T21270] pgscan 56035 [ 3374.170384][T21270] pgsteal 468 [ 3374.170384][T21270] pgscan_kswapd 0 [ 3374.170384][T21270] pgscan_direct 56035 [ 3374.170384][T21270] pgscan_khugepaged 0 [ 3374.170384][T21270] pgsteal_kswapd 0 [ 3374.170384][T21270] pgsteal_direct 468 [ 3374.170384][T21270] pgsteal_khugepaged 0 [ 3374.170384][T21270] pgfault 422190 [ 3374.170384][T21270] pgmajfault 1 [ 3374.170384][T21270] pgrefill 186325 [ 3374.170384][T21270] pgactivate 55528 [ 3374.170384][T21270] pgdeactivate 0 [ 3374.170384][T21270] pglazyfree 0 [ 3374.170384][T21270] pglazyfreed 0 [ 3374.170384][T21270] zswpin 0 [ 3374.170384][T21270] zswpout 0 [ 3374.398599][T21270] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21266,uid=0 [ 3374.421461][T21270] Memory cgroup out of memory: Killed process 21266 (syz-executor.2) total-vm:54548kB, anon-rss:360kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:40 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4e510300) [ 3374.452672][T21261] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3374.471409][T21261] CPU: 0 PID: 21261 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3374.481903][T21261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3374.492079][T21261] Call Trace: [ 3374.495385][T21261] [ 3374.498336][T21261] dump_stack_lvl+0x136/0x150 [ 3374.503052][T21261] dump_header+0x10a/0xd70 [ 3374.507510][T21261] oom_kill_process+0x25d/0x600 [ 3374.512420][T21261] out_of_memory+0x35c/0x1660 [ 3374.517144][T21261] ? oom_killer_disable+0x2b0/0x2b0 [ 3374.522385][T21261] ? rcu_read_unlock+0x9/0x60 [ 3374.527119][T21261] ? find_held_lock+0x2d/0x110 [ 3374.531930][T21261] mem_cgroup_out_of_memory+0x206/0x270 [ 3374.537518][T21261] ? mem_cgroup_margin+0x130/0x130 [ 3374.542668][T21261] ? lock_downgrade+0x690/0x690 [ 3374.547568][T21261] try_charge_memcg+0xf9b/0x13b0 [ 3374.552553][T21261] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3374.558656][T21261] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3374.564426][T21261] ? lock_downgrade+0x690/0x690 [ 3374.569411][T21261] ? lock_downgrade+0x690/0x690 [ 3374.574312][T21261] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3374.580075][T21261] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3374.586286][T21261] copy_process+0x4e3/0x7590 [ 3374.590930][T21261] ? __lock_acquire+0xbc5/0x5d40 [ 3374.595998][T21261] ? __cleanup_sighand+0xb0/0xb0 [ 3374.600969][T21261] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3374.606985][T21261] ? psi_memstall_leave+0x174/0x250 [ 3374.612238][T21261] ? lock_downgrade+0x690/0x690 [ 3374.617129][T21261] kernel_clone+0xeb/0x890 [ 3374.621589][T21261] ? create_io_thread+0xf0/0xf0 [ 3374.626479][T21261] ? percpu_ref_put_many.constprop.0+0x6a/0x1b0 [ 3374.632767][T21261] ? lock_downgrade+0x690/0x690 [ 3374.637685][T21261] __do_sys_clone+0xba/0x100 [ 3374.642308][T21261] ? kernel_clone+0x890/0x890 [ 3374.647044][T21261] ? syscall_enter_from_user_mode+0x26/0x80 [ 3374.652983][T21261] do_syscall_64+0x39/0xb0 [ 3374.657442][T21261] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3374.663373][T21261] RIP: 0033:0x7f461ea8d591 [ 3374.667820][T21261] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3374.687630][T21261] RSP: 002b:00007ffea8ee1e28 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3374.696080][T21261] RAX: ffffffffffffffda RBX: 00007f461f7c3700 RCX: 00007f461ea8d591 [ 3374.704080][T21261] RDX: 00007f461f7c39d0 RSI: 00007f461f7c32f0 RDI: 00000000003d0f00 [ 3374.712082][T21261] RBP: 00007ffea8ee2070 R08: 00007f461f7c3700 R09: 00007f461f7c3700 [ 3374.720178][T21261] R10: 00007f461f7c39d0 R11: 0000000000000206 R12: 00007ffea8ee1ede [ 3374.728180][T21261] R13: 00007ffea8ee1edf R14: 00007f461f7c3300 R15: 0000000000022000 [ 3374.736221][T21261] [ 3374.829461][T21261] memory: usage 307200kB, limit 307200kB, failcnt 83246 [ 3374.845657][T21261] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3374.853581][T21261] Memory cgroup stats for /syz3: [ 3374.853851][T21261] anon 86016 [ 3374.853851][T21261] file 360448 [ 3374.853851][T21261] kernel 314126336 [ 3374.853851][T21261] kernel_stack 32768 [ 3374.853851][T21261] pagetables 69632 08:19:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x159030000000000) [ 3374.853851][T21261] sec_pagetables 0 [ 3374.853851][T21261] percpu 5432256 [ 3374.853851][T21261] sock 0 [ 3374.853851][T21261] vmalloc 8192 [ 3374.853851][T21261] shmem 339968 [ 3374.853851][T21261] zswap 0 [ 3374.853851][T21261] zswapped 0 [ 3374.853851][T21261] file_mapped 327680 [ 3374.853851][T21261] file_dirty 20480 [ 3374.853851][T21261] file_writeback 0 [ 3374.853851][T21261] swapcached 0 [ 3374.853851][T21261] anon_thp 0 [ 3374.853851][T21261] file_thp 0 [ 3374.853851][T21261] shmem_thp 0 [ 3374.853851][T21261] inactive_anon 32768 [ 3374.853851][T21261] active_anon 393216 [ 3374.853851][T21261] inactive_file 0 [ 3374.853851][T21261] active_file 20480 [ 3374.853851][T21261] unevictable 0 [ 3374.853851][T21261] slab_reclaimable 36944 [ 3374.853851][T21261] slab_unreclaimable 308482240 [ 3374.853851][T21261] slab 308519184 [ 3374.853851][T21261] workingset_refault_anon 0 [ 3374.853851][T21261] workingset_refault_file 2 [ 3374.853851][T21261] workingset_activate_anon 0 [ 3374.853851][T21261] workingset_activate_file 0 [ 3374.853851][T21261] workingset_restore_anon 0 [ 3374.853851][T21261] workingset_restore_file 0 [ 3374.853851][T21261] workingset_nodereclaim 0 [ 3374.853851][T21261] pgscan 56526 [ 3374.853851][T21261] pgsteal 461 [ 3374.853851][T21261] pgscan_kswapd 0 [ 3374.853851][T21261] pgscan_direct 56526 [ 3374.853851][T21261] pgscan_khugepaged 0 [ 3374.853851][T21261] pgsteal_kswapd 0 [ 3374.853851][T21261] pgsteal_direct 461 [ 3374.853851][T21261] pgsteal_khugepaged 0 [ 3374.853851][T21261] pgfault 416429 [ 3374.853851][T21261] pgmajfault 1 [ 3374.853851][T21261] pgrefill 216415 [ 3374.853851][T21261] pgactivate 56056 [ 3374.853851][T21261] pgdeactivate 0 [ 3374.853851][T21261] pglazyfree 0 [ 3374.853851][T21261] pglazyfreed 0 [ 3374.853851][T21261] zswpin 0 [ 3374.853851][T21261] zswpout 0 [ 3375.047469][T21261] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=21261,uid=0 [ 3375.068807][T21261] Memory cgroup out of memory: Killed process 21261 (syz-executor.3) total-vm:50708kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3375.100311][T21268] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3375.130420][T21268] CPU: 0 PID: 21268 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3375.140930][T21268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3375.151052][T21268] Call Trace: [ 3375.154372][T21268] [ 3375.157352][T21268] dump_stack_lvl+0x136/0x150 [ 3375.162103][T21268] dump_header+0x10a/0xd70 [ 3375.166615][T21268] oom_kill_process+0x25d/0x600 [ 3375.171536][T21268] out_of_memory+0x35c/0x1660 [ 3375.176266][T21268] ? oom_killer_disable+0x2b0/0x2b0 [ 3375.181513][T21268] ? rcu_read_unlock+0x9/0x60 [ 3375.186240][T21268] ? find_held_lock+0x2d/0x110 [ 3375.191066][T21268] mem_cgroup_out_of_memory+0x206/0x270 [ 3375.196667][T21268] ? mem_cgroup_margin+0x130/0x130 [ 3375.201821][T21268] ? lock_downgrade+0x690/0x690 [ 3375.206720][T21268] try_charge_memcg+0xf29/0x13b0 [ 3375.211722][T21268] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3375.217739][T21268] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3375.223512][T21268] ? lock_downgrade+0x690/0x690 [ 3375.228408][T21268] ? lock_downgrade+0x690/0x690 [ 3375.233317][T21268] obj_cgroup_charge+0x2af/0x5e0 [ 3375.238291][T21268] ? sock_alloc_inode+0x27/0x1d0 [ 3375.243271][T21268] kmem_cache_alloc_lru+0x142/0x600 [ 3375.248527][T21268] sock_alloc_inode+0x27/0x1d0 [ 3375.253330][T21268] ? sock_free_inode+0x30/0x30 [ 3375.258128][T21268] alloc_inode+0x61/0x230 [ 3375.262508][T21268] new_inode_pseudo+0x17/0x80 [ 3375.267242][T21268] sock_alloc+0x40/0x270 [ 3375.271551][T21268] __sock_create+0xbd/0x850 [ 3375.276113][T21268] __sys_socket+0x133/0x250 [ 3375.280668][T21268] ? __sys_socket_file+0x1d0/0x1d0 [ 3375.285863][T21268] ? kcov_ioctl+0x384/0x6f0 [ 3375.290497][T21268] __x64_sys_socket+0x73/0xb0 [ 3375.295248][T21268] do_syscall_64+0x39/0xb0 [ 3375.299719][T21268] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.305670][T21268] RIP: 0033:0x7f0e44a8c169 [ 3375.310113][T21268] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3375.329770][T21268] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3375.338220][T21268] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3375.346225][T21268] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3375.354222][T21268] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3375.362221][T21268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3375.370220][T21268] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3375.378240][T21268] [ 3375.431469][T21268] memory: usage 307200kB, limit 307200kB, failcnt 75636 [ 3375.441131][T21268] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3375.448957][T21268] Memory cgroup stats for /syz5: [ 3375.449413][T21268] anon 102400 [ 3375.449413][T21268] file 348160 [ 3375.449413][T21268] kernel 314089472 [ 3375.449413][T21268] kernel_stack 32768 [ 3375.449413][T21268] pagetables 81920 [ 3375.449413][T21268] sec_pagetables 0 [ 3375.449413][T21268] percpu 5432688 [ 3375.449413][T21268] sock 0 [ 3375.449413][T21268] vmalloc 20480 [ 3375.449413][T21268] shmem 344064 [ 3375.449413][T21268] zswap 0 [ 3375.449413][T21268] zswapped 0 [ 3375.449413][T21268] file_mapped 327680 [ 3375.449413][T21268] file_dirty 4096 [ 3375.449413][T21268] file_writeback 0 [ 3375.449413][T21268] swapcached 0 [ 3375.449413][T21268] anon_thp 0 [ 3375.449413][T21268] file_thp 0 [ 3375.449413][T21268] shmem_thp 0 [ 3375.449413][T21268] inactive_anon 36864 [ 3375.449413][T21268] active_anon 409600 [ 3375.449413][T21268] inactive_file 0 [ 3375.449413][T21268] active_file 4096 [ 3375.449413][T21268] unevictable 0 [ 3375.449413][T21268] slab_reclaimable 12232 [ 3375.449413][T21268] slab_unreclaimable 308476968 [ 3375.449413][T21268] slab 308489200 [ 3375.449413][T21268] workingset_refault_anon 0 [ 3375.449413][T21268] workingset_refault_file 1 [ 3375.449413][T21268] workingset_activate_anon 0 [ 3375.449413][T21268] workingset_activate_file 0 [ 3375.449413][T21268] workingset_restore_anon 0 [ 3375.449413][T21268] workingset_restore_file 0 [ 3375.449413][T21268] workingset_nodereclaim 0 [ 3375.449413][T21268] pgscan 43916 [ 3375.449413][T21268] pgsteal 462 [ 3375.449413][T21268] pgscan_kswapd 0 [ 3375.449413][T21268] pgscan_direct 43916 [ 3375.449413][T21268] pgscan_khugepaged 0 [ 3375.449413][T21268] pgsteal_kswapd 0 [ 3375.449413][T21268] pgsteal_direct 462 [ 3375.449413][T21268] pgsteal_khugepaged 0 [ 3375.449413][T21268] pgfault 412528 [ 3375.449413][T21268] pgmajfault 0 [ 3375.449413][T21268] pgrefill 143893 [ 3375.449413][T21268] pgactivate 43439 [ 3375.449413][T21268] pgdeactivate 0 [ 3375.449413][T21268] pglazyfree 0 [ 3375.449413][T21268] pglazyfreed 0 [ 3375.449413][T21268] zswpin 0 [ 3375.449413][T21268] zswpout 0 [ 3375.651500][T21268] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21264,uid=0 08:19:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xe5010000) [ 3375.667708][T21268] Memory cgroup out of memory: Killed process 21268 (syz-executor.5) total-vm:54680kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3375.695207][T21280] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3375.730683][T21280] CPU: 0 PID: 21280 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3375.741190][T21280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3375.751306][T21280] Call Trace: [ 3375.754647][T21280] [ 3375.757636][T21280] dump_stack_lvl+0x136/0x150 [ 3375.762393][T21280] dump_header+0x10a/0xd70 [ 3375.766895][T21280] oom_kill_process+0x25d/0x600 [ 3375.771836][T21280] out_of_memory+0x35c/0x1660 [ 3375.776595][T21280] ? oom_killer_disable+0x2b0/0x2b0 [ 3375.781883][T21280] ? rcu_read_unlock+0x9/0x60 [ 3375.786633][T21280] ? find_held_lock+0x2d/0x110 [ 3375.791488][T21280] mem_cgroup_out_of_memory+0x206/0x270 [ 3375.797119][T21280] ? mem_cgroup_margin+0x130/0x130 [ 3375.802403][T21280] ? lock_downgrade+0x690/0x690 [ 3375.807350][T21280] try_charge_memcg+0xf9b/0x13b0 [ 3375.812365][T21280] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3375.812420][T21272] warn_alloc: 5 callbacks suppressed [ 3375.812744][T21272] syz-executor.1: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3375.818379][T21280] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3375.818434][T21280] ? lock_downgrade+0x690/0x690 [ 3375.818475][T21280] ? lock_downgrade+0x690/0x690 [ 3375.847301][T21272] ,cpuset= [ 3375.847342][T21280] obj_cgroup_charge+0x2af/0x5e0 [ 3375.854406][T21272] syz1 [ 3375.857037][T21280] ? __d_alloc+0x32/0x980 [ 3375.860969][T21272] ,mems_allowed=0-1 [ 3375.865040][T21280] kmem_cache_alloc_lru+0x142/0x600 [ 3375.865108][T21280] __d_alloc+0x32/0x980 [ 3375.867922][T21272] [ 3375.872093][T21280] ? alloc_fd+0x2e4/0x750 [ 3375.892222][T21280] d_alloc_pseudo+0x1d/0x70 [ 3375.896782][T21280] alloc_file_pseudo+0xca/0x250 [ 3375.901687][T21280] ? alloc_file+0x800/0x800 [ 3375.906235][T21280] ? do_raw_spin_unlock+0x175/0x230 [ 3375.911480][T21280] ? _raw_spin_unlock+0x28/0x40 [ 3375.916380][T21280] ? alloc_fd+0x2e4/0x750 [ 3375.920821][T21280] sock_alloc_file+0x53/0x190 [ 3375.925564][T21280] __sys_socket+0x1a8/0x250 [ 3375.930141][T21280] ? __sys_socket_file+0x1d0/0x1d0 [ 3375.935341][T21280] __x64_sys_socket+0x73/0xb0 [ 3375.940093][T21280] do_syscall_64+0x39/0xb0 [ 3375.944583][T21280] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3375.950561][T21280] RIP: 0033:0x7f9ac628c169 [ 3375.955014][T21280] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3375.974680][T21280] RSP: 002b:00007f9ac6f61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3375.983150][T21280] RAX: ffffffffffffffda RBX: 00007f9ac63abf80 RCX: 00007f9ac628c169 [ 3375.991264][T21280] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3375.999281][T21280] RBP: 00007f9ac62e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3376.007427][T21280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3376.015432][T21280] R13: 00007ffc61d0e97f R14: 00007f9ac6f61300 R15: 0000000000022000 [ 3376.023463][T21280] [ 3376.031283][T21280] memory: usage 307200kB, limit 307200kB, failcnt 72670 [ 3376.038469][T21272] CPU: 1 PID: 21272 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3376.038511][T21272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3376.038530][T21272] Call Trace: [ 3376.038539][T21272] [ 3376.038551][T21272] dump_stack_lvl+0x136/0x150 [ 3376.038593][T21272] warn_alloc+0x213/0x360 [ 3376.049426][T21280] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3376.059222][T21272] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3376.059270][T21272] ? find_held_lock+0x2d/0x110 [ 3376.059333][T21272] ? lock_downgrade+0x690/0x690 [ 3376.059367][T21272] ? mark_held_locks+0x9f/0xe0 [ 3376.059413][T21272] __vmalloc_node_range+0x1021/0x14a0 [ 3376.062824][T21280] Memory cgroup stats for [ 3376.065652][T21272] ? alloc_netdev_mqs+0x9c/0x1250 [ 3376.065714][T21272] ? delayed_vfree_work+0x70/0x70 [ 3376.070573][T21280] /syz2 [ 3376.074684][T21272] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3376.081791][T21280] : [ 3376.087072][T21272] ? kvmalloc_node+0x76/0x1a0 [ 3376.087110][T21272] ? rcu_is_watching+0x12/0xb0 [ 3376.087154][T21272] ? alloc_netdev_mqs+0x9c/0x1250 [ 3376.087200][T21272] kvmalloc_node+0x156/0x1a0 [ 3376.087234][T21272] ? alloc_netdev_mqs+0x9c/0x1250 [ 3376.087270][T21272] alloc_netdev_mqs+0x9c/0x1250 [ 3376.087303][T21272] ? security_capable+0x93/0xc0 [ 3376.087334][T21272] ? br_netpoll_disable+0x60/0x60 [ 3376.087378][T21272] rtnl_create_link+0xbeb/0xee0 [ 3376.087424][T21272] __rtnl_newlink+0xfd4/0x1840 [ 3376.087483][T21272] ? find_held_lock+0x2d/0x110 [ 3376.087534][T21272] ? rtnl_link_unregister+0x250/0x250 [ 3376.087579][T21272] ? __kmem_cache_alloc_node+0x48/0x320 [ 3376.087651][T21272] ? rtnl_newlink+0x4a/0xa0 [ 3376.087710][T21272] rtnl_newlink+0x68/0xa0 [ 3376.087752][T21272] ? __rtnl_newlink+0x1840/0x1840 [ 3376.087797][T21272] rtnetlink_rcv_msg+0x43d/0xd50 [ 3376.087847][T21272] ? rtnl_stats_set+0x4d0/0x4d0 [ 3376.087902][T21272] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3376.087965][T21272] netlink_rcv_skb+0x165/0x440 08:19:42 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r1, 0x0, 0x4ff9c, 0x0) (async) splice(r1, 0x0, r1, 0x0, 0x4ff9c, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/84, 0x54}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) [ 3376.088009][T21272] ? rtnl_stats_set+0x4d0/0x4d0 [ 3376.096929][T21280] anon 94208 [ 3376.096929][T21280] file 364544 [ 3376.096929][T21280] kernel 314114048 [ 3376.096929][T21280] kernel_stack 65536 [ 3376.096929][T21280] pagetables 73728 [ 3376.096929][T21280] sec_pagetables 0 [ 3376.096929][T21280] percpu 5428768 [ 3376.096929][T21280] sock 0 [ 3376.096929][T21280] vmalloc 0 [ 3376.096929][T21280] shmem 348160 [ 3376.096929][T21280] zswap 0 [ 3376.096929][T21280] zswapped 0 [ 3376.096929][T21280] file_mapped 311296 [ 3376.096929][T21280] file_dirty 16384 [ 3376.096929][T21280] file_writeback 0 [ 3376.096929][T21280] swapcached 0 [ 3376.096929][T21280] anon_thp 0 [ 3376.096929][T21280] file_thp 0 [ 3376.096929][T21280] shmem_thp 0 [ 3376.096929][T21280] inactive_anon 36864 [ 3376.096929][T21280] active_anon 405504 [ 3376.096929][T21280] inactive_file 12288 [ 3376.096929][T21280] active_file 4096 [ 3376.096929][T21280] unevictable 0 [ 3376.096929][T21280] slab_reclaimable 217768 [ 3376.096929][T21280] slab_unreclaimable 308297432 [ 3376.096929][T21280] slab 308515200 [ 3376.096929][T21280] workingset_refault_anon 0 [ 3376.096929][T21280] workingset_refault_file 0 [ 3376.096929][T21280] workingset_activate_anon 0 [ 3376.096929][T21280] workingset_activate_file 0 [ 3376.096929][T21280] workingset_restore_anon 0 [ 3376.096929][T21280] workingset_restore_file 0 [ 3376.096929][T21280] workingset_nodereclaim 0 [ 3376.096929][T21280] pgscan 56040 [ 3376.096929][T21280] pgsteal 470 [ 3376.096929][T21280] pgscan_kswapd 0 [ 3376.096929][T21280] pgscan_direct 56040 [ 3376.096929][T21280] pgscan_khugepaged 0 [ 3376.096929][T21280] pgsteal_kswapd 0 [ 3376.096929][T21280] pgsteal_direct 470 [ 3376.096929][T21280] pgsteal_khugepaged 0 [ 3376.096929][T21280] pgfault 422232 [ 3376.096929][T21280] pgmajfault 1 [ 3376.096929][T21280] pgrefill 186633 [ 3376.096929][T21280] pgactivate 55531 [ 3376.096929][T21280] pgdeactivate 0 [ 3376.096929][T21280] pglazyfree 0 [ 3376.096929][T21280] pglazyfreed 0 [ 3376.096929][T21280] zswpin 0 [ 3376.096929][T21280] zswpout 0 [ 3376.097640][T21272] ? netlink_ack+0x1360/0x1360 [ 3376.097714][T21272] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3376.103677][T21280] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3376.108001][T21272] netlink_unicast+0x547/0x7f0 [ 3376.108056][T21272] ? netlink_attachskb+0x890/0x890 [ 3376.108095][T21272] ? __virt_addr_valid+0x61/0x2e0 [ 3376.108140][T21272] ? __phys_addr_symbol+0x30/0x70 [ 3376.108194][T21272] ? __check_object_size+0x333/0x6e0 [ 3376.117605][T21280] ,cpuset= [ 3376.117745][T21272] netlink_sendmsg+0x925/0xe30 [ 3376.122904][T21280] syz2 [ 3376.125534][T21272] ? netlink_unicast+0x7f0/0x7f0 [ 3376.131385][T21280] ,mems_allowed=0-1 08:19:42 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x4f510300) [ 3376.133487][T21272] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3376.141056][T21280] ,oom_memcg= [ 3376.142949][T21272] ? netlink_unicast+0x7f0/0x7f0 [ 3376.143001][T21272] sock_sendmsg+0xde/0x190 [ 3376.148283][T21280] /syz2 [ 3376.152615][T21272] ____sys_sendmsg+0x71c/0x900 [ 3376.159287][T21280] ,task_memcg= [ 3376.162476][T21272] ? copy_msghdr_from_user+0xfc/0x150 [ 3376.168320][T21280] /syz2 [ 3376.172381][T21272] ? kernel_sendmsg+0x50/0x50 [ 3376.178942][T21280] ,task=syz-executor.2,pid=21279,uid=0 [ 3376.182021][T21272] ? futex_unqueue+0xb7/0x120 [ 3376.187233][T21280] Memory cgroup out of memory: Killed process 21279 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3376.192192][T21272] ? futex_wait+0x503/0x680 [ 3376.192253][T21272] ___sys_sendmsg+0x110/0x1b0 [ 3376.192305][T21272] ? do_recvmmsg+0x6e0/0x6e0 [ 3376.192357][T21272] ? __fget_files+0x248/0x480 [ 3376.192413][T21272] ? lock_downgrade+0x690/0x690 [ 3376.192468][T21272] ? __fget_files+0x26a/0x480 [ 3376.343137][T21284] syz-executor.3 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 3376.417513][T21272] ? __fget_light+0xe5/0x270 [ 3376.417585][T21272] __sys_sendmsg+0xf7/0x1c0 [ 3376.417634][T21272] ? __sys_sendmsg_sock+0x40/0x40 [ 3376.417686][T21272] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3376.417756][T21272] ? syscall_enter_from_user_mode+0x26/0x80 [ 3376.417803][T21272] ? lockdep_hardirqs_on+0x7d/0x100 [ 3376.417845][T21272] do_syscall_64+0x39/0xb0 [ 3376.417894][T21272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.417935][T21272] RIP: 0033:0x7faa0ba8c169 [ 3376.417961][T21272] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3376.417992][T21272] RSP: 002b:00007faa0c8d1168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3376.418025][T21272] RAX: ffffffffffffffda RBX: 00007faa0bbabf80 RCX: 00007faa0ba8c169 [ 3376.418048][T21272] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3376.418069][T21272] RBP: 00007faa0bae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3376.418088][T21272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3376.418108][T21272] R13: 00007ffd537ccaef R14: 00007faa0c8d1300 R15: 0000000000022000 [ 3376.418161][T21272] [ 3376.543542][T21272] Mem-Info: [ 3376.596149][T21284] CPU: 0 PID: 21284 Comm: syz-executor.3 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3376.723270][T21284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3376.733443][T21284] Call Trace: [ 3376.736742][T21284] [ 3376.739707][T21284] dump_stack_lvl+0x136/0x150 [ 3376.744423][T21284] dump_header+0x10a/0xd70 [ 3376.748877][T21284] oom_kill_process+0x25d/0x600 [ 3376.753785][T21284] out_of_memory+0x35c/0x1660 [ 3376.758526][T21284] ? find_held_lock+0x2d/0x110 [ 3376.763348][T21284] ? oom_killer_disable+0x2b0/0x2b0 [ 3376.768586][T21284] ? rcu_read_unlock+0x9/0x60 [ 3376.773305][T21284] ? find_held_lock+0x2d/0x110 [ 3376.778126][T21284] mem_cgroup_out_of_memory+0x206/0x270 [ 3376.783747][T21284] ? mem_cgroup_margin+0x130/0x130 [ 3376.788906][T21284] ? lock_downgrade+0x690/0x690 [ 3376.793814][T21284] try_charge_memcg+0xf9b/0x13b0 [ 3376.798808][T21284] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3376.804820][T21284] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3376.810585][T21284] ? lock_downgrade+0x690/0x690 [ 3376.815479][T21284] ? lock_downgrade+0x690/0x690 [ 3376.820394][T21284] obj_cgroup_charge+0x2af/0x5e0 [ 3376.825396][T21284] ? proc_alloc_inode+0x27/0x210 [ 3376.830388][T21284] kmem_cache_alloc_lru+0x142/0x600 [ 3376.835763][T21284] ? find_held_lock+0x2d/0x110 [ 3376.840583][T21284] proc_alloc_inode+0x27/0x210 [ 3376.845386][T21284] ? proc_free_inode+0x20/0x20 [ 3376.850184][T21284] alloc_inode+0x61/0x230 [ 3376.854555][T21284] new_inode+0x2b/0x280 [ 3376.858754][T21284] proc_pid_make_inode+0x26/0x220 [ 3376.863850][T21284] proc_pident_instantiate+0x85/0x320 [ 3376.869303][T21284] proc_pident_lookup+0x1db/0x270 [ 3376.874377][T21284] lookup_open.isra.0+0x944/0x1400 [ 3376.879545][T21284] ? link_path_walk.part.0+0xd60/0xd60 [ 3376.885140][T21284] ? lock_release+0x670/0x670 [ 3376.889988][T21284] path_openat+0x975/0x2750 [ 3376.894555][T21284] ? path_lookupat+0x840/0x840 [ 3376.899549][T21284] do_filp_open+0x1ba/0x410 [ 3376.904095][T21284] ? may_open_dev+0xf0/0xf0 [ 3376.908638][T21284] ? find_held_lock+0x2d/0x110 [ 3376.913546][T21284] ? simple_attr_release+0x50/0x50 [ 3376.918725][T21284] ? _raw_spin_unlock+0x28/0x40 [ 3376.923642][T21284] ? alloc_fd+0x2e4/0x750 [ 3376.928034][T21284] do_sys_openat2+0x16d/0x4c0 [ 3376.932760][T21284] ? build_open_flags+0x6f0/0x6f0 [ 3376.937852][T21284] ? xfd_validate_state+0x5d/0x180 [ 3376.943005][T21284] __x64_sys_openat+0x143/0x1f0 [ 3376.948053][T21284] ? __ia32_sys_open+0x1c0/0x1c0 [ 3376.953145][T21284] ? syscall_enter_from_user_mode+0x26/0x80 [ 3376.959089][T21284] do_syscall_64+0x39/0xb0 [ 3376.963566][T21284] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3376.969534][T21284] RIP: 0033:0x7f461ea3e2f4 [ 3376.973980][T21284] Code: 84 00 00 00 00 00 44 89 54 24 0c e8 96 f9 ff ff 44 8b 54 24 0c 44 89 e2 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 89 44 24 0c e8 c8 f9 ff ff 8b 44 [ 3376.993641][T21284] RSP: 002b:00007ffea8ee1bc0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 3377.002090][T21284] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00007f461ea3e2f4 [ 3377.010099][T21284] RDX: 0000000000080001 RSI: 00007f461eae7d29 RDI: 00000000ffffff9c [ 3377.018120][T21284] RBP: 00007f461eae7d29 R08: 0000000000000000 R09: 00007ffea8ee1bb0 [ 3377.026131][T21284] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000080001 08:19:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x200000000000000) [ 3377.034148][T21284] R13: 00007ffea8ee1c60 R14: 0000000000000000 R15: 00007ffea8ee2200 [ 3377.042271][T21284] [ 3377.056692][T21272] active_anon:82451 inactive_anon:1040 isolated_anon:0 [ 3377.056692][T21272] active_file:9 inactive_file:15619 isolated_file:0 [ 3377.056692][T21272] unevictable:768 dirty:29 writeback:0 [ 3377.056692][T21272] slab_reclaimable:30991 slab_unreclaimable:954009 [ 3377.056692][T21272] mapped:19747 shmem:2052 pagetables:660 [ 3377.056692][T21272] sec_pagetables:0 bounce:0 [ 3377.056692][T21272] kernel_misc_reclaimable:0 [ 3377.056692][T21272] free:449136 free_pcp:17058 free_cma:0 [ 3377.107368][T21284] memory: usage 307200kB, limit 307200kB, failcnt 83349 [ 3377.125130][T21284] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3377.152464][T21284] Memory cgroup stats for /syz3: [ 3377.152990][T21284] anon 73728 [ 3377.152990][T21284] file 364544 [ 3377.152990][T21284] kernel 314073088 [ 3377.152990][T21284] kernel_stack 32768 [ 3377.152990][T21284] pagetables 57344 [ 3377.152990][T21284] sec_pagetables 0 [ 3377.152990][T21284] percpu 5432256 [ 3377.152990][T21284] sock 0 [ 3377.152990][T21284] vmalloc 8192 [ 3377.152990][T21284] shmem 339968 [ 3377.152990][T21284] zswap 0 [ 3377.152990][T21284] zswapped 0 [ 3377.152990][T21284] file_mapped 327680 [ 3377.152990][T21284] file_dirty 20480 [ 3377.152990][T21284] file_writeback 0 [ 3377.152990][T21284] swapcached 0 [ 3377.152990][T21284] anon_thp 0 [ 3377.152990][T21284] file_thp 0 [ 3377.152990][T21284] shmem_thp 0 [ 3377.152990][T21284] inactive_anon 24576 [ 3377.152990][T21284] active_anon 389120 [ 3377.152990][T21284] inactive_file 0 [ 3377.152990][T21284] active_file 24576 [ 3377.152990][T21284] unevictable 0 [ 3377.152990][T21284] slab_reclaimable 35808 [ 3377.152990][T21284] slab_unreclaimable 308474832 [ 3377.152990][T21284] slab 308510640 [ 3377.152990][T21284] workingset_refault_anon 0 [ 3377.152990][T21284] workingset_refault_file 2 [ 3377.152990][T21284] workingset_activate_anon 0 [ 3377.152990][T21284] workingset_activate_file 0 [ 3377.152990][T21284] workingset_restore_anon 0 [ 3377.152990][T21284] workingset_restore_file 0 [ 3377.152990][T21284] workingset_nodereclaim 0 [ 3377.152990][T21284] pgscan 56561 [ 3377.152990][T21284] pgsteal 461 [ 3377.152990][T21284] pgscan_kswapd 0 [ 3377.152990][T21284] pgscan_direct 56561 [ 3377.152990][T21284] pgscan_khugepaged 0 [ 3377.152990][T21284] pgsteal_kswapd 0 [ 3377.152990][T21284] pgsteal_direct 461 [ 3377.152990][T21284] pgsteal_khugepaged 0 [ 3377.152990][T21284] pgfault 416464 [ 3377.152990][T21284] pgmajfault 1 [ 3377.152990][T21284] pgrefill 217090 [ 3377.152990][T21284] pgactivate 56091 [ 3377.152990][T21284] pgdeactivate 0 [ 3377.152990][T21284] pglazyfree 0 [ 3377.152990][T21284] pglazyfreed 0 [ 3377.152990][T21284] zswpin 0 [ 3377.152990][T21284] zswpout 0 [ 3377.161678][T21272] Node 0 active_anon:329460kB inactive_anon:3708kB active_file:8kB inactive_file:57540kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:78988kB dirty:52kB writeback:0kB shmem:6432kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9456kB pagetables:2348kB sec_pagetables:0kB all_unreclaimable? no 08:19:43 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdc53030000000000) [ 3377.384520][T21272] Node 1 active_anon:344kB inactive_anon:452kB active_file:28kB inactive_file:4936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:64kB writeback:0kB shmem:1776kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:528kB pagetables:292kB sec_pagetables:0kB all_unreclaimable? no [ 3377.394631][T21284] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz3,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz-executor.3,pid=5030,uid=0 [ 3377.460310][T21284] Memory cgroup out of memory: Killed process 5030 (syz-executor.3) total-vm:50576kB, anon-rss:368kB, file-rss:8960kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:0 [ 3377.463880][T21272] Node 0 DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:96kB free_cma:0kB [ 3377.532092][T21290] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3377.553648][T21272] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 3377.560228][T21272] Node 0 DMA32 free:44180kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:329060kB inactive_anon:4064kB active_file:8kB inactive_file:55964kB unevictable:1536kB writepending:52kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:39576kB local_pcp:18636kB free_cma:0kB [ 3377.591272][T21290] CPU: 0 PID: 21290 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3377.601765][T21290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3377.611900][T21290] Call Trace: [ 3377.615225][T21290] [ 3377.618203][T21290] dump_stack_lvl+0x136/0x150 [ 3377.622952][T21290] dump_header+0x10a/0xd70 [ 3377.626275][T21272] lowmem_reserve[]: [ 3377.627427][T21290] oom_kill_process+0x25d/0x600 [ 3377.627476][T21290] out_of_memory+0x35c/0x1660 [ 3377.627525][T21290] ? find_held_lock+0x2d/0x110 [ 3377.631342][T21272] 0 0 [ 3377.636190][T21290] ? oom_killer_disable+0x2b0/0x2b0 [ 3377.641149][T21272] 1 [ 3377.645720][T21290] ? rcu_read_unlock+0x9/0x60 [ 3377.645768][T21290] ? find_held_lock+0x2d/0x110 [ 3377.657557][T21272] 1 [ 3377.660869][T21290] mem_cgroup_out_of_memory+0x206/0x270 [ 3377.660933][T21290] ? mem_cgroup_margin+0x130/0x130 [ 3377.665933][T21272] 1 [ 3377.668198][T21290] ? lock_downgrade+0x690/0x690 [ 3377.668257][T21290] try_charge_memcg+0xf9b/0x13b0 [ 3377.668301][T21290] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3377.674038][T21272] [ 3377.678951][T21290] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3377.679008][T21290] ? lock_downgrade+0x690/0x690 [ 3377.681723][T21272] Node 0 [ 3377.686448][T21290] ? lock_downgrade+0x690/0x690 [ 3377.686510][T21290] obj_cgroup_charge+0x2af/0x5e0 [ 3377.686550][T21290] ? sock_alloc_inode+0x27/0x1d0 [ 3377.691693][T21272] Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3377.697450][T21290] kmem_cache_alloc_lru+0x142/0x600 [ 3377.697513][T21290] sock_alloc_inode+0x27/0x1d0 [ 3377.697552][T21290] ? sock_free_inode+0x30/0x30 [ 3377.697589][T21290] alloc_inode+0x61/0x230 [ 3377.697632][T21290] new_inode_pseudo+0x17/0x80 [ 3377.697679][T21290] sock_alloc+0x40/0x270 [ 3377.697720][T21290] __sock_create+0xbd/0x850 [ 3377.697760][T21290] ? xfd_validate_state+0x5d/0x180 [ 3377.697804][T21290] __sys_socket+0x133/0x250 [ 3377.697847][T21290] ? __sys_socket_file+0x1d0/0x1d0 [ 3377.697905][T21290] __x64_sys_socket+0x73/0xb0 [ 3377.697951][T21290] do_syscall_64+0x39/0xb0 [ 3377.698004][T21290] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3377.698048][T21290] RIP: 0033:0x7f0e44a8c169 [ 3377.698075][T21290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3377.698106][T21290] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3377.698137][T21290] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3377.698158][T21290] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3377.698178][T21290] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3377.698196][T21290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3377.698216][T21290] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3377.698260][T21290] [ 3377.737250][T21290] memory: usage 307200kB, limit 307200kB, failcnt 75746 [ 3377.775668][T21272] lowmem_reserve[]: [ 3377.784234][T21290] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3377.813724][T21272] 0 [ 3377.818829][T21290] Memory cgroup stats for [ 3377.856664][T21272] 0 [ 3377.865708][T21290] /syz5 [ 3377.930224][T21272] 0 0 0 [ 3377.936028][T21272] Node 1 Normal free:1740952kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:716kB inactive_anon:560kB active_file:40kB inactive_file:4920kB unevictable:1536kB writepending:64kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:28352kB local_pcp:25400kB free_cma:0kB [ 3377.966458][T21290] : [ 3377.967618][T21290] anon 94208 [ 3377.967618][T21290] file 352256 [ 3377.967618][T21290] kernel 314109952 [ 3377.967618][T21290] kernel_stack 65536 [ 3377.967618][T21290] pagetables 73728 [ 3377.967618][T21290] sec_pagetables 0 [ 3377.967618][T21290] percpu 5432688 [ 3377.967618][T21290] sock 0 [ 3377.967618][T21290] vmalloc 20480 [ 3377.967618][T21290] shmem 344064 [ 3377.967618][T21290] zswap 0 [ 3377.967618][T21290] zswapped 0 [ 3377.967618][T21290] file_mapped 327680 [ 3377.967618][T21290] file_dirty 4096 [ 3377.967618][T21290] file_writeback 0 [ 3377.967618][T21290] swapcached 0 [ 3377.967618][T21290] anon_thp 0 [ 3377.967618][T21290] file_thp 0 [ 3377.967618][T21290] shmem_thp 0 [ 3377.967618][T21290] inactive_anon 24576 [ 3377.967618][T21290] active_anon 413696 [ 3377.967618][T21290] inactive_file 8192 [ 3377.967618][T21290] active_file 0 [ 3377.967618][T21290] unevictable 0 [ 3377.967618][T21290] slab_reclaimable 12472 [ 3377.967618][T21290] slab_unreclaimable 308478384 [ 3377.967618][T21290] slab 308490856 [ 3377.967618][T21290] workingset_refault_anon 0 [ 3377.967618][T21290] workingset_refault_file 1 [ 3377.967618][T21290] workingset_activate_anon 0 [ 3377.967618][T21290] workingset_activate_file 0 [ 3377.967618][T21290] workingset_restore_anon 0 [ 3377.967618][T21290] workingset_restore_file 0 [ 3377.967618][T21290] workingset_nodereclaim 0 [ 3377.967618][T21290] pgscan 43952 [ 3377.967618][T21290] pgsteal 462 [ 3377.967618][T21290] pgscan_kswapd 0 [ 3377.967618][T21290] pgscan_direct 43952 [ 3377.967618][T21290] pgscan_khugepaged 0 [ 3377.967618][T21290] pgsteal_kswapd 0 [ 3377.967618][T21290] pgsteal_direct 462 [ 3377.967618][T21290] pgsteal_khugepaged 0 [ 3377.967618][T21290] pgfault 412572 [ 3377.967618][T21290] pgmajfault 0 [ 3377.967618][T21290] pgrefill 143966 [ 3377.967618][T21290] pgactivate 43475 [ 3377.967618][T21290] pgdeactivate 0 [ 3377.967618][T21290] pglazyfree 0 [ 3377.967618][T21290] pglazyfreed 0 [ 3377.967618][T21290] zswpin 0 [ 3377.967618][T21290] zswpout 0 [ 3377.976791][T21272] lowmem_reserve[]: [ 3378.157593][T21290] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 3378.166088][T21272] 0 0 0 0 0 [ 3378.176678][T21290] ,cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21283,uid=0 [ 3378.178007][T21272] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3378.196791][T21290] Memory cgroup out of memory: Killed process 21283 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3378.207071][T21272] Node 0 DMA32: 283*4kB (UME) 309*8kB (UME) 174*16kB (UME) 91*32kB (ME) 41*64kB (UME) 24*128kB (UME) 14*256kB (UME) 6*512kB (UM) 10*1024kB (UM) 6*2048kB (M) 0*4096kB = 44180kB [ 3378.242390][T21272] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3378.246785][T21285] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3378.270709][T21272] Node 1 Normal: 2*4kB (UE) 166*8kB (UM) 202*16kB (UME) 88*32kB (ME) 75*64kB (UME) 98*128kB (UE) 26*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1740952kB [ 3378.284566][T21285] CPU: 0 PID: 21285 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3378.288702][T21272] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3378.298918][T21285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3378.298940][T21285] Call Trace: [ 3378.298951][T21285] [ 3378.298964][T21285] dump_stack_lvl+0x136/0x150 [ 3378.308657][T21272] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3378.318607][T21285] dump_header+0x10a/0xd70 [ 3378.318657][T21285] oom_kill_process+0x25d/0x600 [ 3378.322013][T21272] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3378.324887][T21285] out_of_memory+0x35c/0x1660 [ 3378.324941][T21285] ? oom_killer_disable+0x2b0/0x2b0 [ 3378.329696][T21272] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3378.338906][T21285] ? rcu_read_unlock+0x9/0x60 [ 3378.338951][T21285] ? find_held_lock+0x2d/0x110 [ 3378.339005][T21285] mem_cgroup_out_of_memory+0x206/0x270 [ 3378.339049][T21285] ? mem_cgroup_margin+0x130/0x130 [ 3378.339088][T21285] ? lock_downgrade+0x690/0x690 [ 3378.339141][T21285] try_charge_memcg+0xf9b/0x13b0 08:19:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xe6020000) [ 3378.339178][T21285] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3378.339223][T21285] ? rcu_read_unlock+0x9/0x60 [ 3378.339260][T21285] ? lock_downgrade+0x690/0x690 [ 3378.339308][T21285] charge_memcg+0x90/0x3b0 [ 3378.339350][T21285] __mem_cgroup_charge+0x2b/0x90 [ 3378.339386][T21285] do_wp_page+0x8eb/0x3520 [ 3378.339429][T21285] ? lock_release+0x670/0x670 [ 3378.339460][T21285] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3378.339500][T21285] ? do_raw_spin_lock+0x124/0x2b0 [ 3378.339539][T21285] ? spin_bug+0x1c0/0x1c0 [ 3378.339586][T21285] ? lock_downgrade+0x690/0x690 [ 3378.339631][T21285] __handle_mm_fault+0x19a1/0x3e60 [ 3378.339680][T21285] ? vm_iomap_memory+0x190/0x190 [ 3378.339750][T21285] handle_mm_fault+0x2ba/0x9c0 [ 3378.339796][T21285] do_user_addr_fault+0x475/0x1230 [ 3378.339847][T21285] ? rcu_is_watching+0x12/0xb0 [ 3378.339894][T21285] exc_page_fault+0x98/0x170 [ 3378.339933][T21285] asm_exc_page_fault+0x26/0x30 [ 3378.339975][T21285] RIP: 0033:0x7f9ac6239610 [ 3378.340001][T21285] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3378.340030][T21285] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3378.340057][T21285] RAX: 000000004750851b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3378.340079][T21285] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 0000000000000022 [ 3378.340100][T21285] RBP: 000000004750851b R08: 000000000000051b R09: 000000004750851f [ 3378.340122][T21285] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3378.340143][T21285] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87f9cc71 [ 3378.340162][T21285] ? __x64_sys_socket+0x11/0xb0 [ 3378.340227][T21285] [ 3378.355389][T21285] memory: usage 307184kB, limit 307200kB, failcnt 72795 [ 3378.368941][T21272] 17682 total pagecache pages [ 3378.405046][T21285] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3378.470467][T21272] 0 pages in swap cache [ 3378.479825][T21285] Memory cgroup stats for [ 3378.555769][T21272] Free swap = 0kB [ 3378.565724][T21285] /syz2 [ 3378.611227][T21272] Total swap = 0kB [ 3378.612219][T21285] : [ 3378.614161][T21272] 2097051 pages RAM [ 3378.618327][T21285] anon 98304 [ 3378.618327][T21285] file 364544 [ 3378.618327][T21285] kernel 314093568 [ 3378.618327][T21285] kernel_stack 65536 [ 3378.618327][T21285] pagetables 69632 [ 3378.618327][T21285] sec_pagetables 0 [ 3378.618327][T21285] percpu 5428704 [ 3378.618327][T21285] sock 0 [ 3378.618327][T21285] vmalloc 0 [ 3378.618327][T21285] shmem 348160 [ 3378.618327][T21285] zswap 0 [ 3378.618327][T21285] zswapped 0 [ 3378.618327][T21285] file_mapped 311296 [ 3378.618327][T21285] file_dirty 16384 [ 3378.618327][T21285] file_writeback 0 [ 3378.618327][T21285] swapcached 0 [ 3378.618327][T21285] anon_thp 0 [ 3378.618327][T21285] file_thp 0 [ 3378.618327][T21285] shmem_thp 0 [ 3378.618327][T21285] inactive_anon 413696 [ 3378.618327][T21285] active_anon 32768 [ 3378.618327][T21285] inactive_file 12288 [ 3378.618327][T21285] active_file 4096 [ 3378.618327][T21285] unevictable 0 [ 3378.618327][T21285] slab_reclaimable 218152 [ 3378.618327][T21285] slab_unreclaimable 308286168 [ 3378.618327][T21285] slab 308504320 [ 3378.618327][T21285] workingset_refault_anon 0 [ 3378.618327][T21285] workingset_refault_file 0 [ 3378.618327][T21285] workingset_activate_anon 0 [ 3378.618327][T21285] workingset_activate_file 0 [ 3378.618327][T21285] workingset_restore_anon 0 [ 3378.618327][T21285] workingset_restore_file 0 [ 3378.618327][T21285] workingset_nodereclaim 0 [ 3378.618327][T21285] pgscan 56040 [ 3378.618327][T21285] pgsteal 470 [ 3378.618327][T21285] pgscan_kswapd 0 [ 3378.618327][T21285] pgscan_direct 56040 [ 3378.618327][T21285] pgscan_khugepaged 0 [ 3378.618327][T21285] pgsteal_kswapd 0 [ 3378.618327][T21285] pgsteal_direct 470 [ 3378.618327][T21285] pgsteal_khugepaged 0 [ 3378.618327][T21285] pgfault 422276 [ 3378.618327][T21285] pgmajfault 1 [ 3378.618327][T21285] pgrefill 186993 [ 3378.618327][T21285] pgactivate 55531 [ 3378.618327][T21285] pgdeactivate 0 [ 3378.618327][T21285] pglazyfree 0 [ 3378.618327][T21285] pglazyfreed 0 [ 3378.618327][T21285] zswpin 0 [ 3378.618327][T21285] zswpout 0 08:19:45 executing program 1: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="0f4f5646c031a91328cd3022583cb38c9b34c8ec0cb7e8e71be040d6b8c4941da36ede12e04537720b2bb39bee1d7bd59fb691e21ce80335d0690caec0d66fded9de24763e4e2afa167c1aa9e47f2a56dbd4765f988db57c638d07e8a117434caf1f0c5ea58ad1eb35861da19929c25b523b867a4e1a96bf6f5f4e48e77f52293051967a8ab17dce662df0a696cb1541ab606fd07b3235cb9d35afe459e52ae35253769ce443fd98917b4ccacc6f2dc2075f39f0306cbf650d17263d7f17304d7c42bd4a7f219658f08f87c35797213c56d4ea7dc8f50da6aa2d79fdd27714a1c6518bc84ffb6dd08c9d0218182f", 0xee, 0x4000000, &(0x7f0000000140)=@in6={0x21, 0x11, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private1, 0xfffffffd}}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x603, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x4}, [@RTA_GATEWAY={0x8, 0x16, @loopback}]}, 0x24}}, 0x0) (async, rerun: 32) r3 = socket$inet6(0xa, 0x3, 0x2c) (rerun: 32) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async, rerun: 64) splice(r1, 0x0, r3, 0x0, 0x4ff9c, 0x0) (rerun: 64) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='#\x00', 0x2) 08:19:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x50510300) [ 3378.618422][T21285] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21285,uid=0 [ 3378.618591][T21285] Memory cgroup out of memory: Killed process 21285 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3378.847438][T21272] 0 pages HighMem/MovableOnly [ 3378.853515][T21272] 392115 pages reserved [ 3378.859437][T21272] 0 pages cma reserved [ 3378.902978][T21296] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3378.936234][T21296] CPU: 1 PID: 21296 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3378.946753][T21296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3378.956868][T21296] Call Trace: [ 3378.960208][T21296] [ 3378.963188][T21296] dump_stack_lvl+0x136/0x150 [ 3378.967936][T21296] dump_header+0x10a/0xd70 [ 3378.972428][T21296] oom_kill_process+0x25d/0x600 [ 3378.977363][T21296] out_of_memory+0x35c/0x1660 [ 3378.982117][T21296] ? find_held_lock+0x2d/0x110 [ 3378.986965][T21296] ? oom_killer_disable+0x2b0/0x2b0 [ 3378.992245][T21296] ? rcu_read_unlock+0x9/0x60 [ 3378.997008][T21296] ? find_held_lock+0x2d/0x110 [ 3379.001891][T21296] mem_cgroup_out_of_memory+0x206/0x270 [ 3379.007523][T21296] ? mem_cgroup_margin+0x130/0x130 [ 3379.012720][T21296] ? lock_downgrade+0x690/0x690 [ 3379.017666][T21296] try_charge_memcg+0xf9b/0x13b0 [ 3379.022698][T21296] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3379.028750][T21296] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3379.034563][T21296] ? lock_downgrade+0x690/0x690 [ 3379.039486][T21296] ? lock_downgrade+0x690/0x690 [ 3379.044437][T21296] obj_cgroup_charge+0x2af/0x5e0 [ 3379.049446][T21296] ? sock_alloc_inode+0x27/0x1d0 [ 3379.054464][T21296] kmem_cache_alloc_lru+0x142/0x600 [ 3379.059757][T21296] sock_alloc_inode+0x27/0x1d0 [ 3379.064596][T21296] ? sock_free_inode+0x30/0x30 [ 3379.069434][T21296] alloc_inode+0x61/0x230 [ 3379.073842][T21296] new_inode_pseudo+0x17/0x80 [ 3379.078600][T21296] sock_alloc+0x40/0x270 [ 3379.082919][T21296] __sock_create+0xbd/0x850 [ 3379.087510][T21296] __sys_socket+0x133/0x250 [ 3379.092125][T21296] ? __sys_socket_file+0x1d0/0x1d0 [ 3379.097375][T21296] ? kcov_ioctl+0x384/0x6f0 [ 3379.101922][T21296] __x64_sys_socket+0x73/0xb0 [ 3379.106652][T21296] do_syscall_64+0x39/0xb0 [ 3379.111124][T21296] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.117073][T21296] RIP: 0033:0x7f0e44a8c169 [ 3379.121535][T21296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3379.141194][T21296] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3379.149750][T21296] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3379.157841][T21296] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3379.165884][T21296] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3379.173908][T21296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3379.181929][T21296] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3379.189955][T21296] [ 3379.204892][T21296] memory: usage 307200kB, limit 307200kB, failcnt 75862 [ 3379.213548][T21296] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3379.220858][T21296] Memory cgroup stats for /syz5: [ 3379.221097][T21296] anon 94208 [ 3379.221097][T21296] file 352256 [ 3379.221097][T21296] kernel 314126336 [ 3379.221097][T21296] kernel_stack 65536 [ 3379.221097][T21296] pagetables 73728 [ 3379.221097][T21296] sec_pagetables 0 [ 3379.221097][T21296] percpu 5432752 [ 3379.221097][T21296] sock 0 [ 3379.221097][T21296] vmalloc 20480 [ 3379.221097][T21296] shmem 344064 [ 3379.221097][T21296] zswap 0 [ 3379.221097][T21296] zswapped 0 [ 3379.221097][T21296] file_mapped 327680 [ 3379.221097][T21296] file_dirty 4096 [ 3379.221097][T21296] file_writeback 0 [ 3379.221097][T21296] swapcached 0 [ 3379.221097][T21296] anon_thp 0 [ 3379.221097][T21296] file_thp 0 [ 3379.221097][T21296] shmem_thp 0 [ 3379.221097][T21296] inactive_anon 28672 [ 3379.221097][T21296] active_anon 409600 [ 3379.221097][T21296] inactive_file 4096 [ 3379.221097][T21296] active_file 4096 [ 3379.221097][T21296] unevictable 0 [ 3379.221097][T21296] slab_reclaimable 12472 [ 3379.221097][T21296] slab_unreclaimable 308487616 [ 3379.221097][T21296] slab 308500088 [ 3379.221097][T21296] workingset_refault_anon 0 [ 3379.221097][T21296] workingset_refault_file 1 [ 3379.221097][T21296] workingset_activate_anon 0 [ 3379.221097][T21296] workingset_activate_file 0 [ 3379.221097][T21296] workingset_restore_anon 0 [ 3379.221097][T21296] workingset_restore_file 0 [ 3379.221097][T21296] workingset_nodereclaim 0 [ 3379.221097][T21296] pgscan 44000 [ 3379.221097][T21296] pgsteal 462 [ 3379.221097][T21296] pgscan_kswapd 0 [ 3379.221097][T21296] pgscan_direct 44000 [ 3379.221097][T21296] pgscan_khugepaged 0 [ 3379.221097][T21296] pgsteal_kswapd 0 [ 3379.221097][T21296] pgsteal_direct 462 [ 3379.221097][T21296] pgsteal_khugepaged 0 [ 3379.221097][T21296] pgfault 412616 [ 3379.221097][T21296] pgmajfault 0 [ 3379.221097][T21296] pgrefill 144061 [ 3379.221097][T21296] pgactivate 43523 [ 3379.221097][T21296] pgdeactivate 0 [ 3379.221097][T21296] pglazyfree 0 [ 3379.221097][T21296] pglazyfreed 0 [ 3379.221097][T21296] zswpin 0 08:19:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x259030000000000) [ 3379.221097][T21296] zswpout 0 [ 3379.419853][T21296] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21295,uid=0 [ 3379.436013][T21296] Memory cgroup out of memory: Killed process 21295 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:19:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xea030000) [ 3379.515602][T21298] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3379.559776][T21298] CPU: 0 PID: 21298 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3379.570297][T21298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3379.580411][T21298] Call Trace: [ 3379.583828][T21298] [ 3379.586817][T21298] dump_stack_lvl+0x136/0x150 [ 3379.591679][T21298] dump_header+0x10a/0xd70 [ 3379.596178][T21298] oom_kill_process+0x25d/0x600 [ 3379.601115][T21298] out_of_memory+0x35c/0x1660 [ 3379.605876][T21298] ? find_held_lock+0x2d/0x110 [ 3379.610722][T21298] ? oom_killer_disable+0x2b0/0x2b0 [ 3379.615997][T21298] ? rcu_read_unlock+0x9/0x60 [ 3379.620744][T21298] ? find_held_lock+0x2d/0x110 [ 3379.625592][T21298] mem_cgroup_out_of_memory+0x206/0x270 [ 3379.631222][T21298] ? mem_cgroup_margin+0x130/0x130 [ 3379.636424][T21298] ? lock_downgrade+0x690/0x690 [ 3379.641367][T21298] try_charge_memcg+0xf9b/0x13b0 [ 3379.646385][T21298] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3379.652435][T21298] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3379.658332][T21298] ? lock_downgrade+0x690/0x690 [ 3379.663266][T21298] ? lock_downgrade+0x690/0x690 [ 3379.668206][T21298] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3379.673832][T21298] memcg_charge_kernel_stack.part.0+0x6c/0x150 [ 3379.680141][T21298] copy_process+0x13a7/0x7590 [ 3379.684862][T21298] ? find_held_lock+0x2d/0x110 [ 3379.689687][T21298] ? __cleanup_sighand+0xb0/0xb0 [ 3379.694690][T21298] ? lock_downgrade+0x690/0x690 [ 3379.699590][T21298] ? folio_flags.constprop.0+0x53/0x150 [ 3379.705192][T21298] ? folio_add_lru+0x47f/0x7c0 [ 3379.710022][T21298] kernel_clone+0xeb/0x890 [ 3379.714511][T21298] ? create_io_thread+0xf0/0xf0 [ 3379.719406][T21298] ? vm_iomap_memory+0x190/0x190 [ 3379.724410][T21298] ? find_held_lock+0x2d/0x110 [ 3379.729252][T21298] __do_sys_clone+0xba/0x100 [ 3379.733886][T21298] ? kernel_clone+0x890/0x890 [ 3379.738620][T21298] ? syscall_enter_from_user_mode+0x26/0x80 [ 3379.744573][T21298] do_syscall_64+0x39/0xb0 [ 3379.749035][T21298] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3379.754993][T21298] RIP: 0033:0x7faa0ba8d591 [ 3379.759436][T21298] Code: 48 85 ff 74 3d 48 85 f6 74 38 48 83 ee 10 48 89 4e 08 48 89 3e 48 89 d7 4c 89 c2 4d 89 c8 4c 8b 54 24 08 b8 38 00 00 00 0f 05 <48> 85 c0 7c 13 74 01 c3 31 ed 58 5f ff d0 48 89 c7 b8 3c 00 00 00 [ 3379.779100][T21298] RSP: 002b:00007ffd537cca38 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 3379.787551][T21298] RAX: ffffffffffffffda RBX: 00007faa0c8b0700 RCX: 00007faa0ba8d591 [ 3379.795554][T21298] RDX: 00007faa0c8b09d0 RSI: 00007faa0c8b02f0 RDI: 00000000003d0f00 [ 3379.803554][T21298] RBP: 00007ffd537ccc80 R08: 00007faa0c8b0700 R09: 00007faa0c8b0700 [ 3379.811551][T21298] R10: 00007faa0c8b09d0 R11: 0000000000000206 R12: 00007ffd537ccaee [ 3379.819566][T21298] R13: 00007ffd537ccaef R14: 00007faa0c8b0300 R15: 0000000000022000 [ 3379.827627][T21298] [ 3379.844878][T21298] memory: usage 307200kB, limit 307200kB, failcnt 96515 [ 3379.864688][T21298] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3379.882524][T21298] Memory cgroup stats for /syz1: [ 3379.882808][T21298] anon 102400 [ 3379.882808][T21298] file 352256 [ 3379.882808][T21298] kernel 314118144 [ 3379.882808][T21298] kernel_stack 65536 [ 3379.882808][T21298] pagetables 81920 [ 3379.882808][T21298] sec_pagetables 0 [ 3379.882808][T21298] percpu 5423968 [ 3379.882808][T21298] sock 0 [ 3379.882808][T21298] vmalloc 24576 [ 3379.882808][T21298] shmem 339968 [ 3379.882808][T21298] zswap 0 [ 3379.882808][T21298] zswapped 0 [ 3379.882808][T21298] file_mapped 262144 [ 3379.882808][T21298] file_dirty 12288 [ 3379.882808][T21298] file_writeback 0 [ 3379.882808][T21298] swapcached 0 [ 3379.882808][T21298] anon_thp 0 [ 3379.882808][T21298] file_thp 0 [ 3379.882808][T21298] shmem_thp 0 [ 3379.882808][T21298] inactive_anon 32768 [ 3379.882808][T21298] active_anon 409600 [ 3379.882808][T21298] inactive_file 12288 [ 3379.882808][T21298] active_file 0 [ 3379.882808][T21298] unevictable 0 [ 3379.882808][T21298] slab_reclaimable 245368 [ 3379.882808][T21298] slab_unreclaimable 308226616 [ 3379.882808][T21298] slab 308471984 [ 3379.882808][T21298] workingset_refault_anon 0 [ 3379.882808][T21298] workingset_refault_file 4 [ 3379.882808][T21298] workingset_activate_anon 0 [ 3379.882808][T21298] workingset_activate_file 0 [ 3379.882808][T21298] workingset_restore_anon 0 [ 3379.882808][T21298] workingset_restore_file 2 [ 3379.882808][T21298] workingset_nodereclaim 0 [ 3379.882808][T21298] pgscan 80277 [ 3379.882808][T21298] pgsteal 607 [ 3379.882808][T21298] pgscan_kswapd 0 [ 3379.882808][T21298] pgscan_direct 80277 [ 3379.882808][T21298] pgscan_khugepaged 0 [ 3379.882808][T21298] pgsteal_kswapd 0 [ 3379.882808][T21298] pgsteal_direct 607 [ 3379.882808][T21298] pgsteal_khugepaged 0 [ 3379.882808][T21298] pgfault 410575 [ 3379.882808][T21298] pgmajfault 0 [ 3379.882808][T21298] pgrefill 220495 [ 3379.882808][T21298] pgactivate 79577 [ 3379.882808][T21298] pgdeactivate 0 [ 3379.882808][T21298] pglazyfree 0 [ 3379.882808][T21298] pglazyfreed 0 [ 3379.882808][T21298] zswpin 0 [ 3379.882808][T21298] zswpout 0 [ 3380.075432][T21298] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21298,uid=0 [ 3380.092952][T21298] Memory cgroup out of memory: Killed process 21298 (syz-executor.1) total-vm:50840kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 08:19:46 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdd53030000000000) [ 3380.120223][T21297] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3380.144785][T21297] CPU: 0 PID: 21297 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3380.155297][T21297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3380.165402][T21297] Call Trace: [ 3380.168730][T21297] [ 3380.171708][T21297] dump_stack_lvl+0x136/0x150 [ 3380.176446][T21297] dump_header+0x10a/0xd70 [ 3380.180938][T21297] oom_kill_process+0x25d/0x600 [ 3380.185871][T21297] out_of_memory+0x35c/0x1660 [ 3380.190633][T21297] ? oom_killer_disable+0x2b0/0x2b0 [ 3380.195902][T21297] ? rcu_read_unlock+0x9/0x60 [ 3380.200653][T21297] ? find_held_lock+0x2d/0x110 [ 3380.205505][T21297] mem_cgroup_out_of_memory+0x206/0x270 [ 3380.211133][T21297] ? mem_cgroup_margin+0x130/0x130 [ 3380.216331][T21297] ? lock_downgrade+0x690/0x690 [ 3380.221270][T21297] try_charge_memcg+0xf9b/0x13b0 [ 3380.226365][T21297] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3380.232420][T21297] ? rcu_read_unlock+0x9/0x60 [ 3380.237168][T21297] ? lock_downgrade+0x690/0x690 [ 3380.242096][T21297] charge_memcg+0x90/0x3b0 [ 3380.246553][T21297] __mem_cgroup_charge+0x2b/0x90 [ 3380.251525][T21297] ? copy_mc_to_kernel+0x3e/0x90 [ 3380.256509][T21297] do_wp_page+0x8eb/0x3520 [ 3380.260977][T21297] ? lock_release+0x670/0x670 [ 3380.265682][T21297] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3380.271101][T21297] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3380.277292][T21297] ? do_raw_spin_lock+0x124/0x2b0 [ 3380.282365][T21297] ? spin_bug+0x1c0/0x1c0 [ 3380.286747][T21297] ? __handle_mm_fault+0x12d5/0x3e60 [ 3380.292128][T21297] __handle_mm_fault+0x19a1/0x3e60 [ 3380.297283][T21297] ? vm_iomap_memory+0x190/0x190 [ 3380.302277][T21297] handle_mm_fault+0x2ba/0x9c0 [ 3380.307082][T21297] do_user_addr_fault+0x475/0x1230 [ 3380.312239][T21297] ? rcu_is_watching+0x12/0xb0 [ 3380.317069][T21297] exc_page_fault+0x98/0x170 [ 3380.321690][T21297] asm_exc_page_fault+0x26/0x30 [ 3380.326586][T21297] RIP: 0033:0x7f9ac6236fdd [ 3380.331040][T21297] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3380.350700][T21297] RSP: 002b:00007ffc61d0ea00 EFLAGS: 00010217 [ 3380.356806][T21297] RAX: 0000000000000000 RBX: 00007f9ac63abf8c RCX: 00007f9ac628c169 [ 3380.364798][T21297] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ac63abf88 [ 3380.372791][T21297] RBP: 00007f9ac63abf80 R08: 00007f9ac6f61700 R09: 0000000000000000 [ 3380.380804][T21297] R10: 00007f9ac6f61700 R11: 0000000000000246 R12: 00007f9ac63abf8c [ 3380.388811][T21297] R13: 00007f9ac5e00060 R14: 00007f9ac63abf80 R15: 0000000000000000 [ 3380.396836][T21297] [ 3380.405069][T21297] memory: usage 307200kB, limit 307200kB, failcnt 72892 [ 3380.412545][T21297] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3380.419906][T21297] Memory cgroup stats for /syz2: [ 3380.420163][T21297] anon 90112 [ 3380.420163][T21297] file 368640 [ 3380.420163][T21297] kernel 314114048 [ 3380.420163][T21297] kernel_stack 65536 [ 3380.420163][T21297] pagetables 69632 [ 3380.420163][T21297] sec_pagetables 0 [ 3380.420163][T21297] percpu 5428768 [ 3380.420163][T21297] sock 0 [ 3380.420163][T21297] vmalloc 0 [ 3380.420163][T21297] shmem 348160 [ 3380.420163][T21297] zswap 0 [ 3380.420163][T21297] zswapped 0 [ 3380.420163][T21297] file_mapped 311296 [ 3380.420163][T21297] file_dirty 16384 [ 3380.420163][T21297] file_writeback 0 [ 3380.420163][T21297] swapcached 0 [ 3380.420163][T21297] anon_thp 0 [ 3380.420163][T21297] file_thp 0 [ 3380.420163][T21297] shmem_thp 0 [ 3380.420163][T21297] inactive_anon 24576 [ 3380.420163][T21297] active_anon 413696 [ 3380.420163][T21297] inactive_file 0 [ 3380.420163][T21297] active_file 20480 [ 3380.420163][T21297] unevictable 0 [ 3380.420163][T21297] slab_reclaimable 218392 [ 3380.420163][T21297] slab_unreclaimable 308298080 [ 3380.420163][T21297] slab 308516472 [ 3380.420163][T21297] workingset_refault_anon 0 [ 3380.420163][T21297] workingset_refault_file 0 [ 3380.420163][T21297] workingset_activate_anon 0 [ 3380.420163][T21297] workingset_activate_file 0 [ 3380.420163][T21297] workingset_restore_anon 0 [ 3380.420163][T21297] workingset_restore_file 0 [ 3380.420163][T21297] workingset_nodereclaim 0 [ 3380.420163][T21297] pgscan 56097 [ 3380.420163][T21297] pgsteal 470 [ 3380.420163][T21297] pgscan_kswapd 0 [ 3380.420163][T21297] pgscan_direct 56097 [ 3380.420163][T21297] pgscan_khugepaged 0 [ 3380.420163][T21297] pgsteal_kswapd 0 [ 3380.420163][T21297] pgsteal_direct 470 [ 3380.420163][T21297] pgsteal_khugepaged 0 [ 3380.420163][T21297] pgfault 422317 [ 3380.420163][T21297] pgmajfault 1 [ 3380.420163][T21297] pgrefill 187396 [ 3380.420163][T21297] pgactivate 55588 [ 3380.420163][T21297] pgdeactivate 0 [ 3380.420163][T21297] pglazyfree 0 [ 3380.420163][T21297] pglazyfreed 0 [ 3380.420163][T21297] zswpin 0 [ 3380.420163][T21297] zswpout 0 08:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x51510300) [ 3380.613186][T21297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21297,uid=0 [ 3380.630089][T21297] Memory cgroup out of memory: Killed process 21297 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 08:19:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x3, 0x4518, 0x20, @dev={0xfe, 0x80, '\x00', 0x23}, @dev={0xfe, 0x80, '\x00', 0xe}, 0x700, 0x10, 0x100, 0x10001}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000e4d67398dcbd3871ee52b9920dee2fe6257287ef1b0a55922ced2326cdffdd6ab4c9863ca783bda3929b2a79df24d45100b67e01a2dd57063dc7575355526832760d4c8af7d60ee433129b683e26821f3cc20eea693d8b08701348dae2917bae41bf43a536dd6cc86ac1fa755799234e5d3e202225a6", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c0000006800000427000000080001000200000006000700070000001c000c8008000300010000000800020000000000080002000900000024000c800800020002000000080003000400000006000100ff0f0000080003000200000014000600ffffffff00"/112], 0x7c}}, 0x0) [ 3380.760961][T21305] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3380.805254][T21305] CPU: 1 PID: 21305 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3380.815771][T21305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3380.825895][T21305] Call Trace: [ 3380.829233][T21305] [ 3380.832220][T21305] dump_stack_lvl+0x136/0x150 [ 3380.836972][T21305] dump_header+0x10a/0xd70 [ 3380.841451][T21305] oom_kill_process+0x25d/0x600 [ 3380.846348][T21305] out_of_memory+0x35c/0x1660 [ 3380.851073][T21305] ? find_held_lock+0x2d/0x110 [ 3380.855898][T21305] ? oom_killer_disable+0x2b0/0x2b0 [ 3380.861230][T21305] ? rcu_read_unlock+0x9/0x60 [ 3380.865978][T21305] ? find_held_lock+0x2d/0x110 [ 3380.870807][T21305] mem_cgroup_out_of_memory+0x206/0x270 [ 3380.876408][T21305] ? mem_cgroup_margin+0x130/0x130 [ 3380.881571][T21305] ? lock_downgrade+0x690/0x690 [ 3380.886486][T21305] try_charge_memcg+0xf9b/0x13b0 [ 3380.891470][T21305] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3380.897521][T21305] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3380.903305][T21305] ? lock_downgrade+0x690/0x690 [ 3380.908226][T21305] ? lock_downgrade+0x690/0x690 [ 3380.913165][T21305] obj_cgroup_charge+0x2af/0x5e0 [ 3380.918148][T21305] ? sock_alloc_inode+0x27/0x1d0 [ 3380.923129][T21305] kmem_cache_alloc_lru+0x142/0x600 [ 3380.928388][T21305] sock_alloc_inode+0x27/0x1d0 [ 3380.933290][T21305] ? sock_free_inode+0x30/0x30 [ 3380.938093][T21305] alloc_inode+0x61/0x230 [ 3380.942466][T21305] new_inode_pseudo+0x17/0x80 [ 3380.947189][T21305] sock_alloc+0x40/0x270 [ 3380.951474][T21305] __sock_create+0xbd/0x850 [ 3380.956032][T21305] __sys_socket+0x133/0x250 [ 3380.960675][T21305] ? __sys_socket_file+0x1d0/0x1d0 [ 3380.965831][T21305] ? kcov_ioctl+0x384/0x6f0 [ 3380.970373][T21305] __x64_sys_socket+0x73/0xb0 [ 3380.975096][T21305] do_syscall_64+0x39/0xb0 [ 3380.979613][T21305] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3380.985561][T21305] RIP: 0033:0x7f0e44a8c169 [ 3380.990022][T21305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3381.009670][T21305] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3381.018120][T21305] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3381.026123][T21305] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3381.034122][T21305] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3381.042129][T21305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3381.050220][T21305] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3381.058254][T21305] [ 3381.086644][T21305] memory: usage 307200kB, limit 307200kB, failcnt 75994 [ 3381.107381][T21305] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3381.114509][T21305] Memory cgroup stats for /syz5: [ 3381.114786][T21305] anon 94208 [ 3381.114786][T21305] file 352256 [ 3381.114786][T21305] kernel 314126336 [ 3381.114786][T21305] kernel_stack 65536 [ 3381.114786][T21305] pagetables 73728 [ 3381.114786][T21305] sec_pagetables 0 [ 3381.114786][T21305] percpu 5432752 [ 3381.114786][T21305] sock 0 [ 3381.114786][T21305] vmalloc 20480 [ 3381.114786][T21305] shmem 344064 [ 3381.114786][T21305] zswap 0 [ 3381.114786][T21305] zswapped 0 [ 3381.114786][T21305] file_mapped 327680 [ 3381.114786][T21305] file_dirty 4096 [ 3381.114786][T21305] file_writeback 0 [ 3381.114786][T21305] swapcached 0 [ 3381.114786][T21305] anon_thp 0 [ 3381.114786][T21305] file_thp 0 [ 3381.114786][T21305] shmem_thp 0 [ 3381.114786][T21305] inactive_anon 40960 [ 3381.114786][T21305] active_anon 397312 [ 3381.114786][T21305] inactive_file 4096 [ 3381.114786][T21305] active_file 4096 [ 3381.114786][T21305] unevictable 0 [ 3381.114786][T21305] slab_reclaimable 12472 [ 3381.114786][T21305] slab_unreclaimable 308487616 [ 3381.114786][T21305] slab 308500088 [ 3381.114786][T21305] workingset_refault_anon 0 [ 3381.114786][T21305] workingset_refault_file 1 [ 3381.114786][T21305] workingset_activate_anon 0 [ 3381.114786][T21305] workingset_activate_file 0 [ 3381.114786][T21305] workingset_restore_anon 0 [ 3381.114786][T21305] workingset_restore_file 0 [ 3381.114786][T21305] workingset_nodereclaim 0 [ 3381.114786][T21305] pgscan 44048 [ 3381.114786][T21305] pgsteal 462 [ 3381.114786][T21305] pgscan_kswapd 0 [ 3381.114786][T21305] pgscan_direct 44048 [ 3381.114786][T21305] pgscan_khugepaged 0 [ 3381.114786][T21305] pgsteal_kswapd 0 [ 3381.114786][T21305] pgsteal_direct 462 [ 3381.114786][T21305] pgsteal_khugepaged 0 [ 3381.114786][T21305] pgfault 412658 [ 3381.114786][T21305] pgmajfault 0 [ 3381.114786][T21305] pgrefill 144160 [ 3381.114786][T21305] pgactivate 43571 [ 3381.114786][T21305] pgdeactivate 0 [ 3381.114786][T21305] pglazyfree 0 [ 3381.114786][T21305] pglazyfreed 0 [ 3381.114786][T21305] zswpin 0 [ 3381.114786][T21305] zswpout 0 08:19:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf0ffffff) 08:19:47 executing program 1: sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="0f4f5646c031a91328cd3022583cb38c9b34c8ec0cb7e8e71be040d6b8c4941da36ede12e04537720b2bb39bee1d7bd59fb691e21ce80335d0690caec0d66fded9de24763e4e2afa167c1aa9e47f2a56dbd4765f988db57c638d07e8a117434caf1f0c5ea58ad1eb35861da19929c25b523b867a4e1a96bf6f5f4e48e77f52293051967a8ab17dce662df0a696cb1541ab606fd07b3235cb9d35afe459e52ae35253769ce443fd98917b4ccacc6f2dc2075f39f0306cbf650d17263d7f17304d7c42bd4a7f219658f08f87c35797213c56d4ea7dc8f50da6aa2d79fdd27714a1c6518bc84ffb6dd08c9d0218182f", 0xee, 0x4000000, &(0x7f0000000140)=@in6={0x21, 0x11, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private1, 0xfffffffd}}, 0x24) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x603, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x4}, [@RTA_GATEWAY={0x8, 0x16, @loopback}]}, 0x24}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) splice(r1, 0x0, r3, 0x0, 0x4ff9c, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='#\x00', 0x2) sendto$rxrpc(0xffffffffffffffff, &(0x7f0000000040)="0f4f5646c031a91328cd3022583cb38c9b34c8ec0cb7e8e71be040d6b8c4941da36ede12e04537720b2bb39bee1d7bd59fb691e21ce80335d0690caec0d66fded9de24763e4e2afa167c1aa9e47f2a56dbd4765f988db57c638d07e8a117434caf1f0c5ea58ad1eb35861da19929c25b523b867a4e1a96bf6f5f4e48e77f52293051967a8ab17dce662df0a696cb1541ab606fd07b3235cb9d35afe459e52ae35253769ce443fd98917b4ccacc6f2dc2075f39f0306cbf650d17263d7f17304d7c42bd4a7f219658f08f87c35797213c56d4ea7dc8f50da6aa2d79fdd27714a1c6518bc84ffb6dd08c9d0218182f", 0xee, 0x4000000, &(0x7f0000000140)=@in6={0x21, 0x11, 0x2, 0x1c, {0xa, 0x4e21, 0x9, @private1, 0xfffffffd}}, 0x24) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x0) (async) pipe(&(0x7f0000000000)) (async) unshare(0x40000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) unshare(0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x603, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfd, 0x4}, [@RTA_GATEWAY={0x8, 0x16, @loopback}]}, 0x24}}, 0x0) (async) socket$inet6(0xa, 0x3, 0x2c) (async) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) splice(r1, 0x0, r3, 0x0, 0x4ff9c, 0x0) (async) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='#\x00', 0x2) (async) [ 3381.326069][T21305] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21302,uid=0 [ 3381.349435][T21305] Memory cgroup out of memory: Killed process 21302 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3381.375009][T21304] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3381.403972][T21304] CPU: 1 PID: 21304 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3381.414483][T21304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3381.424689][T21304] Call Trace: [ 3381.428016][T21304] [ 3381.431000][T21304] dump_stack_lvl+0x136/0x150 [ 3381.435754][T21304] dump_header+0x10a/0xd70 [ 3381.440262][T21304] oom_kill_process+0x25d/0x600 [ 3381.445184][T21304] out_of_memory+0x35c/0x1660 [ 3381.449959][T21304] ? oom_killer_disable+0x2b0/0x2b0 [ 3381.455223][T21304] ? rcu_read_unlock+0x9/0x60 [ 3381.459949][T21304] ? find_held_lock+0x2d/0x110 [ 3381.464779][T21304] mem_cgroup_out_of_memory+0x206/0x270 [ 3381.470459][T21304] ? mem_cgroup_margin+0x130/0x130 [ 3381.475611][T21304] ? lock_downgrade+0x690/0x690 [ 3381.480559][T21304] try_charge_memcg+0xf9b/0x13b0 [ 3381.485538][T21304] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3381.491561][T21304] ? rcu_read_unlock+0x9/0x60 [ 3381.496282][T21304] ? lock_downgrade+0x690/0x690 [ 3381.501181][T21304] charge_memcg+0x90/0x3b0 [ 3381.505634][T21304] __mem_cgroup_charge+0x2b/0x90 [ 3381.510608][T21304] __handle_mm_fault+0x1895/0x3e60 [ 3381.515777][T21304] ? vm_iomap_memory+0x190/0x190 [ 3381.520789][T21304] handle_mm_fault+0x2ba/0x9c0 [ 3381.525603][T21304] do_user_addr_fault+0x475/0x1230 [ 3381.530761][T21304] ? rcu_is_watching+0x12/0xb0 [ 3381.535665][T21304] exc_page_fault+0x98/0x170 [ 3381.540296][T21304] asm_exc_page_fault+0x26/0x30 [ 3381.545213][T21304] RIP: 0033:0x7f79ea82bde9 [ 3381.549745][T21304] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3381.569405][T21304] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3381.575589][T21304] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3381.583586][T21304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3381.591590][T21304] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3381.599600][T21304] R10: 00007f79ea400068 R11: 0000000000000246 R12: 0000000000338ebd [ 3381.607605][T21304] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3381.615625][T21304] [ 3381.736994][T21304] memory: usage 307200kB, limit 307200kB, failcnt 79283 [ 3381.744423][T21304] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3381.768437][T21304] Memory cgroup stats for /syz4: [ 3381.768709][T21304] anon 135168 [ 3381.768709][T21304] file 319488 [ 3381.768709][T21304] kernel 314118144 [ 3381.768709][T21304] kernel_stack 65536 [ 3381.768709][T21304] pagetables 77824 [ 3381.768709][T21304] sec_pagetables 0 [ 3381.768709][T21304] percpu 5432256 [ 3381.768709][T21304] sock 0 [ 3381.768709][T21304] vmalloc 0 [ 3381.768709][T21304] shmem 311296 [ 3381.768709][T21304] zswap 0 [ 3381.768709][T21304] zswapped 0 [ 3381.768709][T21304] file_mapped 311296 [ 3381.768709][T21304] file_dirty 4096 [ 3381.768709][T21304] file_writeback 0 [ 3381.768709][T21304] swapcached 0 [ 3381.768709][T21304] anon_thp 0 [ 3381.768709][T21304] file_thp 0 [ 3381.768709][T21304] shmem_thp 0 [ 3381.768709][T21304] inactive_anon 49152 [ 3381.768709][T21304] active_anon 397312 [ 3381.768709][T21304] inactive_file 8192 [ 3381.768709][T21304] active_file 0 [ 3381.768709][T21304] unevictable 0 [ 3381.768709][T21304] slab_reclaimable 16920 [ 3381.768709][T21304] slab_unreclaimable 308493096 [ 3381.768709][T21304] slab 308510016 [ 3381.768709][T21304] workingset_refault_anon 0 [ 3381.768709][T21304] workingset_refault_file 0 [ 3381.768709][T21304] workingset_activate_anon 0 [ 3381.768709][T21304] workingset_activate_file 0 [ 3381.768709][T21304] workingset_restore_anon 0 [ 3381.768709][T21304] workingset_restore_file 0 [ 3381.768709][T21304] workingset_nodereclaim 0 [ 3381.768709][T21304] pgscan 51035 [ 3381.768709][T21304] pgsteal 497 [ 3381.768709][T21304] pgscan_kswapd 0 [ 3381.768709][T21304] pgscan_direct 51035 [ 3381.768709][T21304] pgscan_khugepaged 0 [ 3381.768709][T21304] pgsteal_kswapd 0 [ 3381.768709][T21304] pgsteal_direct 497 [ 3381.768709][T21304] pgsteal_khugepaged 0 [ 3381.768709][T21304] pgfault 405718 [ 3381.768709][T21304] pgmajfault 1 [ 3381.768709][T21304] pgrefill 141148 [ 3381.768709][T21304] pgactivate 50477 [ 3381.768709][T21304] pgdeactivate 0 [ 3381.768709][T21304] pglazyfree 0 [ 3381.768709][T21304] pglazyfreed 0 [ 3381.768709][T21304] zswpin 0 [ 3381.768709][T21304] zswpout 0 [ 3381.961191][T21304] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21304,uid=0 [ 3382.010264][T21304] Memory cgroup out of memory: Killed process 21304 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3382.039086][T21308] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3382.056753][T21308] CPU: 1 PID: 21308 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3382.067261][T21308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3382.077367][T21308] Call Trace: [ 3382.080758][T21308] [ 3382.083717][T21308] dump_stack_lvl+0x136/0x150 [ 3382.088529][T21308] dump_header+0x10a/0xd70 [ 3382.092994][T21308] oom_kill_process+0x25d/0x600 [ 3382.097889][T21308] out_of_memory+0x35c/0x1660 [ 3382.102622][T21308] ? oom_killer_disable+0x2b0/0x2b0 [ 3382.107902][T21308] ? rcu_read_unlock+0x9/0x60 [ 3382.112632][T21308] ? find_held_lock+0x2d/0x110 [ 3382.117457][T21308] mem_cgroup_out_of_memory+0x206/0x270 [ 3382.123150][T21308] ? mem_cgroup_margin+0x130/0x130 [ 3382.128434][T21308] ? lock_downgrade+0x690/0x690 [ 3382.133453][T21308] try_charge_memcg+0xf9b/0x13b0 [ 3382.138439][T21308] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3382.144455][T21308] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3382.150228][T21308] ? lock_downgrade+0x690/0x690 [ 3382.155294][T21308] ? lock_downgrade+0x690/0x690 [ 3382.160191][T21308] obj_cgroup_charge+0x2af/0x5e0 [ 3382.165169][T21308] ? sock_alloc_inode+0x27/0x1d0 [ 3382.170148][T21308] kmem_cache_alloc_lru+0x142/0x600 [ 3382.175410][T21308] sock_alloc_inode+0x27/0x1d0 [ 3382.180217][T21308] ? sock_free_inode+0x30/0x30 [ 3382.185024][T21308] alloc_inode+0x61/0x230 [ 3382.189402][T21308] new_inode_pseudo+0x17/0x80 [ 3382.194154][T21308] sock_alloc+0x40/0x270 [ 3382.198726][T21308] __sock_create+0xbd/0x850 [ 3382.203281][T21308] __sys_socket+0x133/0x250 [ 3382.207827][T21308] ? __sys_socket_file+0x1d0/0x1d0 [ 3382.213004][T21308] ? kcov_ioctl+0x384/0x6f0 [ 3382.217549][T21308] __x64_sys_socket+0x73/0xb0 [ 3382.222284][T21308] do_syscall_64+0x39/0xb0 [ 3382.226761][T21308] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3382.232705][T21308] RIP: 0033:0x7f9ac628c169 [ 3382.237153][T21308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3382.256799][T21308] RSP: 002b:00007f9ac6f61168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3382.265252][T21308] RAX: ffffffffffffffda RBX: 00007f9ac63abf80 RCX: 00007f9ac628c169 [ 3382.273253][T21308] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3382.281251][T21308] RBP: 00007f9ac62e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3382.289253][T21308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3382.297341][T21308] R13: 00007ffc61d0e97f R14: 00007f9ac6f61300 R15: 0000000000022000 [ 3382.305364][T21308] [ 3382.427615][T21308] memory: usage 307200kB, limit 307200kB, failcnt 72998 [ 3382.445273][T21308] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3382.473269][T21308] Memory cgroup stats for /syz2: [ 3382.473535][T21308] anon 94208 [ 3382.473535][T21308] file 368640 [ 3382.473535][T21308] kernel 314109952 [ 3382.473535][T21308] kernel_stack 65536 [ 3382.473535][T21308] pagetables 69632 [ 3382.473535][T21308] sec_pagetables 0 [ 3382.473535][T21308] percpu 5428768 [ 3382.473535][T21308] sock 0 [ 3382.473535][T21308] vmalloc 0 [ 3382.473535][T21308] shmem 348160 [ 3382.473535][T21308] zswap 0 [ 3382.473535][T21308] zswapped 0 [ 3382.473535][T21308] file_mapped 311296 [ 3382.473535][T21308] file_dirty 16384 [ 3382.473535][T21308] file_writeback 0 [ 3382.473535][T21308] swapcached 0 [ 3382.473535][T21308] anon_thp 0 [ 3382.473535][T21308] file_thp 0 [ 3382.473535][T21308] shmem_thp 0 [ 3382.473535][T21308] inactive_anon 45056 [ 3382.473535][T21308] active_anon 397312 [ 3382.473535][T21308] inactive_file 0 [ 3382.473535][T21308] active_file 20480 [ 3382.473535][T21308] unevictable 0 [ 3382.473535][T21308] slab_reclaimable 216464 [ 3382.473535][T21308] slab_unreclaimable 308297432 [ 3382.473535][T21308] slab 308513896 [ 3382.473535][T21308] workingset_refault_anon 0 [ 3382.473535][T21308] workingset_refault_file 0 [ 3382.473535][T21308] workingset_activate_anon 0 [ 3382.473535][T21308] workingset_activate_file 0 [ 3382.473535][T21308] workingset_restore_anon 0 [ 3382.473535][T21308] workingset_restore_file 0 [ 3382.473535][T21308] workingset_nodereclaim 0 [ 3382.473535][T21308] pgscan 56169 [ 3382.473535][T21308] pgsteal 470 [ 3382.473535][T21308] pgscan_kswapd 0 [ 3382.473535][T21308] pgscan_direct 56169 [ 3382.473535][T21308] pgscan_khugepaged 0 [ 3382.473535][T21308] pgsteal_kswapd 0 08:19:49 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xde53030000000000) [ 3382.473535][T21308] pgsteal_direct 470 [ 3382.473535][T21308] pgsteal_khugepaged 0 [ 3382.473535][T21308] pgfault 422359 [ 3382.473535][T21308] pgmajfault 1 [ 3382.473535][T21308] pgrefill 187901 [ 3382.473535][T21308] pgactivate 55660 [ 3382.473535][T21308] pgdeactivate 0 [ 3382.473535][T21308] pglazyfree 0 [ 3382.473535][T21308] pglazyfreed 0 [ 3382.473535][T21308] zswpin 0 [ 3382.473535][T21308] zswpout 0 08:19:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x300000000000000) [ 3382.868080][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3382.946875][T21308] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21307,uid=0 08:19:49 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x52020000) [ 3382.987958][T21308] Memory cgroup out of memory: Killed process 21307 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3383.025495][T21311] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3383.053720][T21311] CPU: 0 PID: 21311 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3383.064258][T21311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3383.074448][T21311] Call Trace: [ 3383.077791][T21311] [ 3383.080774][T21311] dump_stack_lvl+0x136/0x150 [ 3383.085527][T21311] dump_header+0x10a/0xd70 [ 3383.090301][T21311] oom_kill_process+0x25d/0x600 [ 3383.095232][T21311] out_of_memory+0x35c/0x1660 [ 3383.100011][T21311] ? oom_killer_disable+0x2b0/0x2b0 [ 3383.105303][T21311] ? rcu_read_unlock+0x9/0x60 [ 3383.110063][T21311] ? find_held_lock+0x2d/0x110 [ 3383.114924][T21311] mem_cgroup_out_of_memory+0x206/0x270 [ 3383.120562][T21311] ? mem_cgroup_margin+0x130/0x130 [ 3383.125768][T21311] ? lock_downgrade+0x690/0x690 [ 3383.130728][T21311] try_charge_memcg+0xf9b/0x13b0 [ 3383.135746][T21311] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3383.141798][T21311] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3383.147607][T21311] ? lock_downgrade+0x690/0x690 [ 3383.152546][T21311] ? lock_downgrade+0x690/0x690 [ 3383.157489][T21311] obj_cgroup_charge+0x2af/0x5e0 [ 3383.162518][T21311] ? sock_alloc_inode+0x27/0x1d0 [ 3383.167500][T21311] kmem_cache_alloc_lru+0x142/0x600 [ 3383.172761][T21311] sock_alloc_inode+0x27/0x1d0 [ 3383.177565][T21311] ? sock_free_inode+0x30/0x30 [ 3383.182379][T21311] alloc_inode+0x61/0x230 [ 3383.186767][T21311] new_inode_pseudo+0x17/0x80 [ 3383.191579][T21311] sock_alloc+0x40/0x270 [ 3383.195863][T21311] __sock_create+0xbd/0x850 [ 3383.200421][T21311] ? xfd_validate_state+0x5d/0x180 [ 3383.205582][T21311] __sys_socket+0x133/0x250 [ 3383.210146][T21311] ? __sys_socket_file+0x1d0/0x1d0 [ 3383.215341][T21311] __x64_sys_socket+0x73/0xb0 [ 3383.220090][T21311] do_syscall_64+0x39/0xb0 [ 3383.224578][T21311] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3383.230519][T21311] RIP: 0033:0x7f0e44a8c169 [ 3383.234965][T21311] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3383.254606][T21311] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3383.263065][T21311] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3383.271068][T21311] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3383.279069][T21311] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3383.287069][T21311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3383.295078][T21311] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3383.303192][T21311] [ 3383.515341][T21311] memory: usage 307200kB, limit 307200kB, failcnt 76114 [ 3383.540429][T21311] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3383.555986][T21311] Memory cgroup stats for /syz5: [ 3383.556291][T21311] anon 94208 [ 3383.556291][T21311] file 352256 [ 3383.556291][T21311] kernel 314109952 [ 3383.556291][T21311] kernel_stack 65536 [ 3383.556291][T21311] pagetables 73728 [ 3383.556291][T21311] sec_pagetables 0 [ 3383.556291][T21311] percpu 5432688 [ 3383.556291][T21311] sock 0 [ 3383.556291][T21311] vmalloc 20480 [ 3383.556291][T21311] shmem 344064 [ 3383.556291][T21311] zswap 0 [ 3383.556291][T21311] zswapped 0 [ 3383.556291][T21311] file_mapped 327680 [ 3383.556291][T21311] file_dirty 4096 [ 3383.556291][T21311] file_writeback 0 [ 3383.556291][T21311] swapcached 0 [ 3383.556291][T21311] anon_thp 0 [ 3383.556291][T21311] file_thp 0 [ 3383.556291][T21311] shmem_thp 0 [ 3383.556291][T21311] inactive_anon 8192 [ 3383.556291][T21311] active_anon 430080 [ 3383.556291][T21311] inactive_file 8192 [ 3383.556291][T21311] active_file 0 [ 3383.556291][T21311] unevictable 0 [ 3383.556291][T21311] slab_reclaimable 12472 [ 3383.556291][T21311] slab_unreclaimable 308475704 [ 3383.556291][T21311] slab 308488176 [ 3383.556291][T21311] workingset_refault_anon 0 [ 3383.556291][T21311] workingset_refault_file 1 [ 3383.556291][T21311] workingset_activate_anon 0 [ 3383.556291][T21311] workingset_activate_file 0 [ 3383.556291][T21311] workingset_restore_anon 0 [ 3383.556291][T21311] workingset_restore_file 0 [ 3383.556291][T21311] workingset_nodereclaim 0 [ 3383.556291][T21311] pgscan 44090 [ 3383.556291][T21311] pgsteal 462 [ 3383.556291][T21311] pgscan_kswapd 0 [ 3383.556291][T21311] pgscan_direct 44090 [ 3383.556291][T21311] pgscan_khugepaged 0 [ 3383.556291][T21311] pgsteal_kswapd 0 [ 3383.556291][T21311] pgsteal_direct 462 [ 3383.556291][T21311] pgsteal_khugepaged 0 [ 3383.556291][T21311] pgfault 412700 [ 3383.556291][T21311] pgmajfault 0 [ 3383.556291][T21311] pgrefill 144246 [ 3383.556291][T21311] pgactivate 43613 [ 3383.556291][T21311] pgdeactivate 0 [ 3383.556291][T21311] pglazyfree 0 [ 3383.556291][T21311] pglazyfreed 0 [ 3383.556291][T21311] zswpin 0 [ 3383.556291][T21311] zswpout 0 [ 3383.771334][T21311] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21310,uid=0 08:19:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf4000000) [ 3383.806945][T21311] Memory cgroup out of memory: Killed process 21310 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 [ 3383.836780][T21312] syz-executor.4 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3383.865822][T21312] CPU: 1 PID: 21312 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3383.876336][T21312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3383.886427][T21312] Call Trace: [ 3383.889728][T21312] [ 3383.892685][T21312] dump_stack_lvl+0x136/0x150 [ 3383.897415][T21312] dump_header+0x10a/0xd70 [ 3383.901873][T21312] oom_kill_process+0x25d/0x600 [ 3383.906795][T21312] out_of_memory+0x35c/0x1660 [ 3383.911517][T21312] ? oom_killer_disable+0x2b0/0x2b0 [ 3383.916754][T21312] ? rcu_read_unlock+0x9/0x60 [ 3383.921747][T21312] ? find_held_lock+0x2d/0x110 [ 3383.926581][T21312] mem_cgroup_out_of_memory+0x206/0x270 [ 3383.932211][T21312] ? mem_cgroup_margin+0x130/0x130 [ 3383.937471][T21312] ? lock_downgrade+0x690/0x690 [ 3383.942387][T21312] try_charge_memcg+0xf9b/0x13b0 [ 3383.947366][T21312] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3383.953385][T21312] ? rcu_read_unlock+0x9/0x60 [ 3383.958120][T21312] ? lock_downgrade+0x690/0x690 [ 3383.963018][T21312] charge_memcg+0x90/0x3b0 [ 3383.967466][T21312] __mem_cgroup_charge+0x2b/0x90 [ 3383.972443][T21312] do_wp_page+0x8eb/0x3520 [ 3383.976916][T21312] ? lock_release+0x670/0x670 [ 3383.981645][T21312] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3383.987058][T21312] ? do_raw_spin_lock+0x124/0x2b0 [ 3383.992167][T21312] ? spin_bug+0x1c0/0x1c0 [ 3383.996570][T21312] ? lock_downgrade+0x690/0x690 [ 3384.001469][T21312] __handle_mm_fault+0x19a1/0x3e60 [ 3384.006649][T21312] ? vm_iomap_memory+0x190/0x190 [ 3384.011664][T21312] handle_mm_fault+0x2ba/0x9c0 [ 3384.016482][T21312] do_user_addr_fault+0x475/0x1230 [ 3384.021642][T21312] ? rcu_is_watching+0x12/0xb0 [ 3384.026472][T21312] exc_page_fault+0x98/0x170 [ 3384.031109][T21312] asm_exc_page_fault+0x26/0x30 [ 3384.036017][T21312] RIP: 0033:0x7f79ea839610 [ 3384.040472][T21312] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3384.060305][T21312] RSP: 002b:00007ffd939e5ce0 EFLAGS: 00010246 [ 3384.066403][T21312] RAX: 0000000070baccc8 RBX: 00007f79ea9ac018 RCX: 0000001b2d020000 [ 3384.074487][T21312] RDX: 0000000000000000 RSI: 0000001b2d020018 RDI: 000000000a26eae0 [ 3384.082485][T21312] RBP: 0000000070baccc8 R08: 0000000000000cc8 R09: 0000000070bacccc [ 3384.090508][T21312] R10: 00007ffd939e5ea0 R11: 0000000000000246 R12: 00007f79ea9a0000 [ 3384.098505][T21312] R13: 0000000000000001 R14: 000000000000000a R15: ffffffff83d3eb65 [ 3384.106509][T21312] ? apparmor_socket_create+0x45/0x670 [ 3384.112038][T21312] [ 3384.150503][T21312] memory: usage 307188kB, limit 307200kB, failcnt 79366 [ 3384.157919][T21312] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3384.165200][T21312] Memory cgroup stats for /syz4: [ 3384.165472][T21312] anon 126976 [ 3384.165472][T21312] file 323584 [ 3384.165472][T21312] kernel 314109952 [ 3384.165472][T21312] kernel_stack 65536 [ 3384.165472][T21312] pagetables 69632 [ 3384.165472][T21312] sec_pagetables 0 [ 3384.165472][T21312] percpu 5432256 [ 3384.165472][T21312] sock 0 [ 3384.165472][T21312] vmalloc 0 [ 3384.165472][T21312] shmem 311296 [ 3384.165472][T21312] zswap 0 [ 3384.165472][T21312] zswapped 0 [ 3384.165472][T21312] file_mapped 311296 [ 3384.165472][T21312] file_dirty 4096 [ 3384.165472][T21312] file_writeback 0 [ 3384.165472][T21312] swapcached 0 [ 3384.165472][T21312] anon_thp 0 [ 3384.165472][T21312] file_thp 0 [ 3384.165472][T21312] shmem_thp 0 [ 3384.165472][T21312] inactive_anon 393216 [ 3384.165472][T21312] active_anon 45056 [ 3384.165472][T21312] inactive_file 4096 [ 3384.165472][T21312] active_file 8192 [ 3384.165472][T21312] unevictable 0 [ 3384.165472][T21312] slab_reclaimable 17160 [ 3384.165472][T21312] slab_unreclaimable 308492696 [ 3384.165472][T21312] slab 308509856 [ 3384.165472][T21312] workingset_refault_anon 0 [ 3384.165472][T21312] workingset_refault_file 0 [ 3384.165472][T21312] workingset_activate_anon 0 [ 3384.165472][T21312] workingset_activate_file 0 [ 3384.165472][T21312] workingset_restore_anon 0 [ 3384.165472][T21312] workingset_restore_file 0 [ 3384.165472][T21312] workingset_nodereclaim 0 [ 3384.165472][T21312] pgscan 51086 [ 3384.165472][T21312] pgsteal 497 [ 3384.165472][T21312] pgscan_kswapd 0 [ 3384.165472][T21312] pgscan_direct 51086 [ 3384.165472][T21312] pgscan_khugepaged 0 [ 3384.165472][T21312] pgsteal_kswapd 0 [ 3384.165472][T21312] pgsteal_direct 497 [ 3384.165472][T21312] pgsteal_khugepaged 0 [ 3384.165472][T21312] pgfault 405775 [ 3384.165472][T21312] pgmajfault 1 [ 3384.165472][T21312] pgrefill 141201 [ 3384.165472][T21312] pgactivate 50528 [ 3384.165472][T21312] pgdeactivate 0 [ 3384.165472][T21312] pglazyfree 0 [ 3384.165472][T21312] pglazyfreed 0 [ 3384.165472][T21312] zswpin 0 [ 3384.165472][T21312] zswpout 0 08:19:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x359030000000000) [ 3384.392267][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3384.426169][T21312] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21312,uid=0 [ 3384.486156][T21312] Memory cgroup out of memory: Killed process 21312 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3384.570761][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:19:51 executing program 1: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000240)={'gretap0\x00', 0x0, 0x700, 0x1, 0x1, 0x6, {{0xb, 0x4, 0x0, 0x8, 0x2c, 0x65, 0x0, 0x4, 0x29, 0x0, @local, @broadcast, {[@cipso={0x86, 0x17, 0xffffffffffffffff, [{0x2, 0x9, "78dac699e446d7"}, {0x0, 0x3, 'O'}, {0x7, 0x5, "fa8512"}]}]}}}}}) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@gettclass={0x24, 0x2a, 0x8, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x7, 0x8}, {0x10, 0x9}, {0xc, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x48890}, 0x2404c801) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0xf, @TCA_CBS_PARMS={0x18}}}]}, 0x48}}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_DESTROY(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x40, 0x24, 0x5820a61ca228651, 0x0, 0x80000, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x7bf1}}]}, 0x40}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)={0x90, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x4}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000000}, 0x60004001) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x28, 0x2, 0x2, 0x0, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_EXPECT_ID={0x8}, @CTA_EXPECT_NAT={0xc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44040}, 0x4000000) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000800000000000000506e464a597a1fdfaf624fbd9fa01c243a5ee337ad1158b997a6a2e166c859e20bf0937aebb688a57de3a2be4c024aae39563dfb557132fbd2bbc5f633f4037cca7d9d72eff384599d5f101d41ea240f15f9904984ed6376db7427c6cfdf3760cee92468177e26b1c903780d2e30b7ee20a6223c33b012077fee8cac13a8af77a1b9cf03ba24a724f1cfc239730829d409f0f99320754bd2a1795963d90674fe96738f5387ce18adfd5030015cc02fce60b96cf61c01fe26e83a01a367b5f4aa2e802b4856d89b95dfdb2b4c947aacdcf39efa332850b647977449e640b6f5437f561c09484252695e14c458a9", @ANYRES32=0x0, @ANYBLOB="0000000000f1ff00400012800b0001006261746164760000300002800d0001004241544d414a5f4956000000cb9266bb3ce60600000000000041544d414b5f560d0001004241544d"], 0x60}}, 0x200080d0) [ 3384.622715][T21317] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3384.655155][T21317] CPU: 0 PID: 21317 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3384.665660][T21317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3384.675772][T21317] Call Trace: [ 3384.679095][T21317] [ 3384.682100][T21317] dump_stack_lvl+0x136/0x150 [ 3384.686842][T21317] dump_header+0x10a/0xd70 [ 3384.691330][T21317] oom_kill_process+0x25d/0x600 [ 3384.696254][T21317] out_of_memory+0x35c/0x1660 [ 3384.701004][T21317] ? oom_killer_disable+0x2b0/0x2b0 [ 3384.706272][T21317] ? rcu_read_unlock+0x9/0x60 [ 3384.711010][T21317] ? find_held_lock+0x2d/0x110 [ 3384.715916][T21317] mem_cgroup_out_of_memory+0x206/0x270 [ 3384.721506][T21317] ? mem_cgroup_margin+0x130/0x130 [ 3384.726658][T21317] ? lock_downgrade+0x690/0x690 [ 3384.731663][T21317] try_charge_memcg+0xf9b/0x13b0 [ 3384.736638][T21317] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3384.742654][T21317] ? rcu_read_unlock+0x9/0x60 [ 3384.747372][T21317] ? lock_downgrade+0x690/0x690 [ 3384.752274][T21317] charge_memcg+0x90/0x3b0 [ 3384.756729][T21317] __mem_cgroup_charge+0x2b/0x90 [ 3384.761694][T21317] ? copy_mc_to_kernel+0x3e/0x90 [ 3384.766679][T21317] do_wp_page+0x8eb/0x3520 [ 3384.771255][T21317] ? lock_release+0x670/0x670 [ 3384.775963][T21317] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3384.781376][T21317] ? do_raw_spin_lock+0x124/0x2b0 [ 3384.786537][T21317] ? spin_bug+0x1c0/0x1c0 [ 3384.790907][T21317] ? lock_downgrade+0x690/0x690 [ 3384.795802][T21317] __handle_mm_fault+0x19a1/0x3e60 [ 3384.800967][T21317] ? vm_iomap_memory+0x190/0x190 [ 3384.805970][T21317] handle_mm_fault+0x2ba/0x9c0 [ 3384.810778][T21317] do_user_addr_fault+0x475/0x1230 [ 3384.815935][T21317] ? rcu_is_watching+0x12/0xb0 [ 3384.820743][T21317] exc_page_fault+0x98/0x170 [ 3384.825375][T21317] asm_exc_page_fault+0x26/0x30 [ 3384.830277][T21317] RIP: 0033:0x7f9ac6236fdd [ 3384.834718][T21317] Code: e0 04 8b 44 02 08 85 c0 0f 85 3e 0a 00 00 31 c0 b9 40 42 0f 00 ba 81 00 00 00 c7 06 01 00 00 00 bf ca 00 00 00 e8 73 51 05 00 <83> 05 a4 69 17 00 01 80 bc 24 d8 00 00 00 00 0f b6 05 b7 e6 c9 00 [ 3384.854457][T21317] RSP: 002b:00007ffc61d0ea00 EFLAGS: 00010207 [ 3384.860555][T21317] RAX: 0000000000000001 RBX: 00007f9ac63abf8c RCX: 00007f9ac628c169 [ 3384.868554][T21317] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9ac63abf88 [ 3384.876556][T21317] RBP: 00007f9ac63abf80 R08: 00007f9ac6f61700 R09: 0000000000000000 [ 3384.884725][T21317] R10: 00007f9ac6f61700 R11: 0000000000000246 R12: 00007f9ac63abf8c [ 3384.892811][T21317] R13: 00007f9ac5e00060 R14: 00007f9ac63abf80 R15: 0000000000000000 [ 3384.900825][T21317] [ 3384.956923][T21317] memory: usage 307200kB, limit 307200kB, failcnt 73075 [ 3384.964117][T21317] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3384.989194][T21317] Memory cgroup stats for /syz2: [ 3384.989517][T21317] anon 81920 [ 3384.989517][T21317] file 368640 [ 3384.989517][T21317] kernel 314114048 [ 3384.989517][T21317] kernel_stack 65536 [ 3384.989517][T21317] pagetables 69632 [ 3384.989517][T21317] sec_pagetables 0 [ 3384.989517][T21317] percpu 5428768 [ 3384.989517][T21317] sock 0 [ 3384.989517][T21317] vmalloc 0 [ 3384.989517][T21317] shmem 348160 [ 3384.989517][T21317] zswap 0 [ 3384.989517][T21317] zswapped 0 [ 3384.989517][T21317] file_mapped 229376 [ 3384.989517][T21317] file_dirty 16384 [ 3384.989517][T21317] file_writeback 0 [ 3384.989517][T21317] swapcached 0 [ 3384.989517][T21317] anon_thp 0 [ 3384.989517][T21317] file_thp 0 [ 3384.989517][T21317] shmem_thp 0 [ 3384.989517][T21317] inactive_anon 307200 [ 3384.989517][T21317] active_anon 32768 [ 3384.989517][T21317] inactive_file 0 [ 3384.989517][T21317] active_file 20480 [ 3384.989517][T21317] unevictable 0 [ 3384.989517][T21317] slab_reclaimable 218392 [ 3384.989517][T21317] slab_unreclaimable 308298080 [ 3384.989517][T21317] slab 308516472 [ 3384.989517][T21317] workingset_refault_anon 0 [ 3384.989517][T21317] workingset_refault_file 0 [ 3384.989517][T21317] workingset_activate_anon 0 [ 3384.989517][T21317] workingset_activate_file 0 [ 3384.989517][T21317] workingset_restore_anon 0 [ 3384.989517][T21317] workingset_restore_file 0 [ 3384.989517][T21317] workingset_nodereclaim 0 [ 3384.989517][T21317] pgscan 56218 [ 3384.989517][T21317] pgsteal 470 [ 3384.989517][T21317] pgscan_kswapd 0 [ 3384.989517][T21317] pgscan_direct 56218 [ 3384.989517][T21317] pgscan_khugepaged 0 [ 3384.989517][T21317] pgsteal_kswapd 0 [ 3384.989517][T21317] pgsteal_direct 470 [ 3384.989517][T21317] pgsteal_khugepaged 0 [ 3384.989517][T21317] pgfault 422400 [ 3384.989517][T21317] pgmajfault 1 [ 3384.989517][T21317] pgrefill 188245 [ 3384.989517][T21317] pgactivate 55709 [ 3384.989517][T21317] pgdeactivate 0 [ 3384.989517][T21317] pglazyfree 0 [ 3384.989517][T21317] pglazyfreed 0 [ 3384.989517][T21317] zswpin 0 [ 3384.989517][T21317] zswpout 0 [ 3385.205101][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 08:19:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xdf53030000000000) [ 3385.442062][T21326] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 3385.534620][T21317] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21317,uid=0 [ 3385.550949][T21317] Memory cgroup out of memory: Killed process 21317 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3385.577515][T21320] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3385.588549][T21320] CPU: 1 PID: 21320 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3385.599128][T21320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3385.609220][T21320] Call Trace: [ 3385.612520][T21320] [ 3385.615475][T21320] dump_stack_lvl+0x136/0x150 [ 3385.620207][T21320] dump_header+0x10a/0xd70 [ 3385.624673][T21320] oom_kill_process+0x25d/0x600 [ 3385.629576][T21320] out_of_memory+0x35c/0x1660 [ 3385.634302][T21320] ? oom_killer_disable+0x2b0/0x2b0 [ 3385.639550][T21320] ? rcu_read_unlock+0x9/0x60 [ 3385.644282][T21320] ? find_held_lock+0x2d/0x110 [ 3385.649111][T21320] mem_cgroup_out_of_memory+0x206/0x270 [ 3385.654708][T21320] ? mem_cgroup_margin+0x130/0x130 [ 3385.659871][T21320] ? lock_downgrade+0x690/0x690 [ 3385.664797][T21320] try_charge_memcg+0xf9b/0x13b0 [ 3385.669778][T21320] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3385.675797][T21320] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3385.681573][T21320] ? lock_downgrade+0x690/0x690 [ 3385.686463][T21320] ? lock_downgrade+0x690/0x690 [ 3385.691374][T21320] obj_cgroup_charge+0x2af/0x5e0 [ 3385.696522][T21320] ? sock_alloc_inode+0x27/0x1d0 [ 3385.701505][T21320] kmem_cache_alloc_lru+0x142/0x600 [ 3385.706761][T21320] sock_alloc_inode+0x27/0x1d0 [ 3385.711565][T21320] ? sock_free_inode+0x30/0x30 [ 3385.716365][T21320] alloc_inode+0x61/0x230 [ 3385.720826][T21320] new_inode_pseudo+0x17/0x80 [ 3385.725550][T21320] sock_alloc+0x40/0x270 [ 3385.729854][T21320] __sock_create+0xbd/0x850 [ 3385.734397][T21320] ? xfd_validate_state+0x5d/0x180 [ 3385.739550][T21320] __sys_socket+0x133/0x250 [ 3385.744110][T21320] ? __sys_socket_file+0x1d0/0x1d0 [ 3385.749281][T21320] __x64_sys_socket+0x73/0xb0 [ 3385.754051][T21320] do_syscall_64+0x39/0xb0 [ 3385.758517][T21320] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3385.764450][T21320] RIP: 0033:0x7f0e44a8c169 [ 3385.768892][T21320] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3385.788546][T21320] RSP: 002b:00007f0e458bd168 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 3385.796997][T21320] RAX: ffffffffffffffda RBX: 00007f0e44babf80 RCX: 00007f0e44a8c169 [ 3385.805013][T21320] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 3385.813011][T21320] RBP: 00007f0e44ae7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3385.821006][T21320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 08:19:52 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0x52510300) [ 3385.829001][T21320] R13: 00007ffc44a978cf R14: 00007f0e458bd300 R15: 0000000000022000 [ 3385.837032][T21320] [ 3385.889427][ T5034] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3385.896824][T21320] memory: usage 307184kB, limit 307200kB, failcnt 76227 [ 3385.896854][T21320] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3385.896876][T21320] Memory cgroup stats for /syz5: [ 3385.897190][T21320] anon 90112 [ 3385.897190][T21320] file 352256 [ 3385.897190][T21320] kernel 314109952 [ 3385.897190][T21320] kernel_stack 65536 [ 3385.897190][T21320] pagetables 73728 [ 3385.897190][T21320] sec_pagetables 0 [ 3385.897190][T21320] percpu 5432688 [ 3385.897190][T21320] sock 0 [ 3385.897190][T21320] vmalloc 20480 [ 3385.897190][T21320] shmem 344064 [ 3385.897190][T21320] zswap 0 [ 3385.897190][T21320] zswapped 0 [ 3385.897190][T21320] file_mapped 327680 [ 3385.897190][T21320] file_dirty 8192 [ 3385.897190][T21320] file_writeback 0 [ 3385.897190][T21320] swapcached 0 [ 3385.897190][T21320] anon_thp 0 [ 3385.897190][T21320] file_thp 0 [ 3385.897190][T21320] shmem_thp 0 [ 3385.897190][T21320] inactive_anon 368640 [ 3385.897190][T21320] active_anon 57344 [ 3385.897190][T21320] inactive_file 0 [ 3385.897190][T21320] active_file 8192 [ 3385.897190][T21320] unevictable 0 [ 3385.897190][T21320] slab_reclaimable 12472 [ 3385.897190][T21320] slab_unreclaimable 308476008 [ 3385.897190][T21320] slab 308488480 [ 3385.897190][T21320] workingset_refault_anon 0 [ 3385.897190][T21320] workingset_refault_file 1 [ 3385.897190][T21320] workingset_activate_anon 0 [ 3385.897190][T21320] workingset_activate_file 0 [ 3385.897190][T21320] workingset_restore_anon 0 [ 3385.897190][T21320] workingset_restore_file 0 [ 3385.897190][T21320] workingset_nodereclaim 0 [ 3385.897190][T21320] pgscan 44097 [ 3385.897190][T21320] pgsteal 463 [ 3385.897190][T21320] pgscan_kswapd 0 [ 3385.897190][T21320] pgscan_direct 44097 [ 3385.897190][T21320] pgscan_khugepaged 0 [ 3385.897190][T21320] pgsteal_kswapd 0 [ 3385.897190][T21320] pgsteal_direct 463 [ 3385.897190][T21320] pgsteal_khugepaged 0 [ 3385.897190][T21320] pgfault 412745 [ 3385.897190][T21320] pgmajfault 0 [ 3385.897190][T21320] pgrefill 144373 [ 3385.897190][T21320] pgactivate 43619 [ 3385.897190][T21320] pgdeactivate 0 [ 3385.897190][T21320] pglazyfree 0 [ 3385.897190][T21320] pglazyfreed 0 [ 3385.897190][T21320] zswpin 0 [ 3385.897190][T21320] zswpout 0 [ 3385.949569][T21331] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3386.117017][T21331] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3386.127761][T21331] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3386.135531][T21331] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3386.144515][T21331] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3386.200722][T21320] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21319,uid=0 [ 3386.336788][T21320] Memory cgroup out of memory: Killed process 21319 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:80kB oom_score_adj:1000 08:19:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x407, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x3c}}, 0xf8030000) [ 3386.380510][T21325] syz-executor.4 invoked oom-killer: gfp_mask=0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), order=0, oom_score_adj=1000 [ 3386.419598][T21325] CPU: 0 PID: 21325 Comm: syz-executor.4 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3386.430127][T21325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3386.440233][T21325] Call Trace: [ 3386.443565][T21325] [ 3386.446633][T21325] dump_stack_lvl+0x136/0x150 [ 3386.451393][T21325] dump_header+0x10a/0xd70 [ 3386.455892][T21325] oom_kill_process+0x25d/0x600 [ 3386.460817][T21325] out_of_memory+0x35c/0x1660 [ 3386.465591][T21325] ? oom_killer_disable+0x2b0/0x2b0 [ 3386.470946][T21325] ? rcu_read_unlock+0x9/0x60 [ 3386.475681][T21325] ? find_held_lock+0x2d/0x110 [ 3386.480516][T21325] mem_cgroup_out_of_memory+0x206/0x270 [ 3386.486131][T21325] ? mem_cgroup_margin+0x130/0x130 [ 3386.491310][T21325] ? lock_downgrade+0x690/0x690 [ 3386.496232][T21325] try_charge_memcg+0xf9b/0x13b0 [ 3386.501223][T21325] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3386.507263][T21325] ? get_mem_cgroup_from_objcg+0xa1/0x280 [ 3386.513061][T21325] ? lock_downgrade+0x690/0x690 [ 3386.518000][T21325] ? lock_downgrade+0x690/0x690 [ 3386.522945][T21325] __memcg_kmem_charge_page+0x16e/0x3c0 [ 3386.528568][T21325] __alloc_pages+0x1f3/0x4a0 [ 3386.533232][T21325] ? __alloc_pages_slowpath.constprop.0+0x2170/0x2170 [ 3386.540094][T21325] ? __lock_acquire+0xbc5/0x5d40 [ 3386.545126][T21325] alloc_pages+0x1aa/0x270 [ 3386.549607][T21325] __pmd_alloc+0x3f/0x5d0 [ 3386.554029][T21325] __handle_mm_fault+0x932/0x3e60 [ 3386.559142][T21325] ? vm_iomap_memory+0x190/0x190 [ 3386.564187][T21325] handle_mm_fault+0x2ba/0x9c0 [ 3386.569039][T21325] do_user_addr_fault+0x475/0x1230 [ 3386.574229][T21325] ? rcu_is_watching+0x12/0xb0 [ 3386.579066][T21325] exc_page_fault+0x98/0x170 [ 3386.583723][T21325] asm_exc_page_fault+0x26/0x30 [ 3386.588639][T21325] RIP: 0033:0x7f79ea82bde9 [ 3386.593103][T21325] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3386.593820][T21323] syz-executor.0: vmalloc error: size 4096, page order 0, failed to allocate pages, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_RETRY_MAYFAIL|__GFP_ZERO), nodemask=(null) [ 3386.612832][T21325] RSP: 002b:00007ffd939e5d80 EFLAGS: 00010246 [ 3386.612863][T21325] RAX: 0000000020000300 RBX: 0000000000000000 RCX: 0000000000000000 [ 3386.612883][T21325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556b792e8 [ 3386.612903][T21325] RBP: 00007ffd939e5e78 R08: 0000000000000000 R09: 0000000000000000 [ 3386.612923][T21325] R10: 00007f79ea400068 R11: 0000000000000246 R12: 000000000033a155 [ 3386.630838][T21323] ,cpuset= [ 3386.636696][T21325] R13: 00007ffd939e5ea0 R14: 00007f79ea9abf80 R15: 0000000000000032 [ 3386.636747][T21325] [ 3386.649437][T21325] memory: usage 307200kB, limit 307200kB, failcnt 79430 [ 3386.694285][T21325] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3386.702143][T21325] Memory cgroup stats for /syz4: [ 3386.702399][T21325] anon 135168 [ 3386.702399][T21325] file 319488 [ 3386.702399][T21325] kernel 314101760 [ 3386.702399][T21325] kernel_stack 65536 [ 3386.702399][T21325] pagetables 69632 [ 3386.702399][T21325] sec_pagetables 0 [ 3386.702399][T21325] percpu 5432256 [ 3386.702399][T21325] sock 0 [ 3386.702399][T21325] vmalloc 0 [ 3386.702399][T21325] shmem 311296 [ 3386.702399][T21325] zswap 0 [ 3386.702399][T21325] zswapped 0 [ 3386.702399][T21325] file_mapped 311296 [ 3386.702399][T21325] file_dirty 8192 [ 3386.702399][T21325] file_writeback 0 [ 3386.702399][T21325] swapcached 0 [ 3386.702399][T21325] anon_thp 0 [ 3386.702399][T21325] file_thp 0 [ 3386.702399][T21325] shmem_thp 0 [ 3386.702399][T21325] inactive_anon 270336 [ 3386.702399][T21325] active_anon 176128 [ 3386.702399][T21325] inactive_file 0 [ 3386.702399][T21325] active_file 8192 [ 3386.702399][T21325] unevictable 0 [ 3386.702399][T21325] slab_reclaimable 16920 [ 3386.702399][T21325] slab_unreclaimable 308489216 [ 3386.702399][T21325] slab 308506136 [ 3386.702399][T21325] workingset_refault_anon 0 [ 3386.702399][T21325] workingset_refault_file 0 [ 3386.702399][T21325] workingset_activate_anon 0 [ 3386.702399][T21325] workingset_activate_file 0 [ 3386.702399][T21325] workingset_restore_anon 0 [ 3386.702399][T21325] workingset_restore_file 0 [ 3386.702399][T21325] workingset_nodereclaim 0 [ 3386.702399][T21325] pgscan 51087 [ 3386.702399][T21325] pgsteal 498 [ 3386.702399][T21325] pgscan_kswapd 0 [ 3386.702399][T21325] pgscan_direct 51087 [ 3386.702399][T21325] pgscan_khugepaged 0 [ 3386.702399][T21325] pgsteal_kswapd 0 [ 3386.702399][T21325] pgsteal_direct 498 [ 3386.702399][T21325] pgsteal_khugepaged 0 [ 3386.702399][T21325] pgfault 405836 [ 3386.702399][T21325] pgmajfault 1 [ 3386.702399][T21325] pgrefill 141308 [ 3386.702399][T21325] pgactivate 50528 [ 3386.702399][T21325] pgdeactivate 0 [ 3386.702399][T21325] pglazyfree 0 [ 3386.702399][T21325] pglazyfreed 0 [ 3386.702399][T21325] zswpin 0 [ 3386.702399][T21325] zswpout 0 [ 3386.726825][T21323] syz0,mems_allowed=0-1 [ 3386.921403][T21323] CPU: 1 PID: 21323 Comm: syz-executor.0 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3386.931910][T21323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3386.942202][T21323] Call Trace: [ 3386.945528][T21323] [ 3386.948512][T21323] dump_stack_lvl+0x136/0x150 [ 3386.953260][T21323] warn_alloc+0x213/0x360 [ 3386.957666][T21323] ? zone_watermark_ok_safe+0x2e0/0x2e0 [ 3386.963289][T21323] ? find_held_lock+0x2d/0x110 [ 3386.968501][T21323] ? lock_downgrade+0x690/0x690 [ 3386.973422][T21323] ? mark_held_locks+0x9f/0xe0 [ 3386.978275][T21323] __vmalloc_node_range+0x1021/0x14a0 [ 3386.983754][T21323] ? alloc_netdev_mqs+0x9c/0x1250 [ 3386.988874][T21323] ? delayed_vfree_work+0x70/0x70 [ 3386.993983][T21323] ? __kmem_cache_alloc_node+0xb4/0x320 [ 3386.999620][T21323] ? kvmalloc_node+0x76/0x1a0 [ 3387.004340][T21323] ? rcu_is_watching+0x12/0xb0 [ 3387.009159][T21323] ? alloc_netdev_mqs+0x9c/0x1250 [ 3387.014239][T21323] kvmalloc_node+0x156/0x1a0 [ 3387.018889][T21323] ? alloc_netdev_mqs+0x9c/0x1250 [ 3387.023969][T21323] alloc_netdev_mqs+0x9c/0x1250 [ 3387.028863][T21323] ? security_capable+0x93/0xc0 [ 3387.033751][T21323] ? br_netpoll_disable+0x60/0x60 [ 3387.038822][T21323] rtnl_create_link+0xbeb/0xee0 [ 3387.043742][T21323] __rtnl_newlink+0xfd4/0x1840 [ 3387.048594][T21323] ? rtnl_link_unregister+0x250/0x250 [ 3387.054120][T21323] ? rtnl_newlink+0x4a/0xa0 [ 3387.058725][T21323] rtnl_newlink+0x68/0xa0 [ 3387.063123][T21323] ? __rtnl_newlink+0x1840/0x1840 [ 3387.068295][T21323] rtnetlink_rcv_msg+0x43d/0xd50 [ 3387.073286][T21323] ? rtnl_stats_set+0x4d0/0x4d0 [ 3387.078209][T21323] ? __dev_queue_xmit+0xb2e/0x3c40 [ 3387.083469][T21323] netlink_rcv_skb+0x165/0x440 [ 3387.088297][T21323] ? rtnl_stats_set+0x4d0/0x4d0 [ 3387.093192][T21323] ? netlink_ack+0x1360/0x1360 [ 3387.098014][T21323] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3387.103366][T21323] netlink_unicast+0x547/0x7f0 [ 3387.108217][T21323] ? netlink_attachskb+0x890/0x890 [ 3387.113403][T21323] ? __virt_addr_valid+0x61/0x2e0 [ 3387.118524][T21323] ? __phys_addr_symbol+0x30/0x70 [ 3387.123601][T21323] ? __check_object_size+0x333/0x6e0 [ 3387.128931][T21323] netlink_sendmsg+0x925/0xe30 [ 3387.133744][T21323] ? netlink_unicast+0x7f0/0x7f0 [ 3387.138741][T21323] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3387.144091][T21323] ? netlink_unicast+0x7f0/0x7f0 [ 3387.149085][T21323] sock_sendmsg+0xde/0x190 [ 3387.153541][T21323] ____sys_sendmsg+0x71c/0x900 [ 3387.158436][T21323] ? copy_msghdr_from_user+0xfc/0x150 [ 3387.163943][T21323] ? kernel_sendmsg+0x50/0x50 [ 3387.168679][T21323] ? futex_unqueue+0xb7/0x120 [ 3387.173405][T21323] ? futex_wait+0x503/0x680 [ 3387.177961][T21323] ___sys_sendmsg+0x110/0x1b0 [ 3387.182687][T21323] ? do_recvmmsg+0x6e0/0x6e0 [ 3387.187328][T21323] ? __fget_files+0x248/0x480 [ 3387.192068][T21323] ? lock_downgrade+0x690/0x690 [ 3387.197058][T21323] ? __fget_files+0x26a/0x480 [ 3387.201970][T21323] ? __fget_light+0xe5/0x270 [ 3387.206620][T21323] __sys_sendmsg+0xf7/0x1c0 [ 3387.211170][T21323] ? __sys_sendmsg_sock+0x40/0x40 [ 3387.216244][T21323] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3387.222202][T21323] ? syscall_enter_from_user_mode+0x26/0x80 [ 3387.228142][T21323] ? lockdep_hardirqs_on+0x7d/0x100 [ 3387.233387][T21323] do_syscall_64+0x39/0xb0 [ 3387.237881][T21323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3387.243846][T21323] RIP: 0033:0x7fb9a048c169 [ 3387.248295][T21323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 3387.268024][T21323] RSP: 002b:00007fb99effe168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3387.276563][T21323] RAX: ffffffffffffffda RBX: 00007fb9a05abf80 RCX: 00007fb9a048c169 [ 3387.284563][T21323] RDX: 0359030000000000 RSI: 0000000020000300 RDI: 0000000000000003 [ 3387.292572][T21323] RBP: 00007fb9a04e7ca1 R08: 0000000000000000 R09: 0000000000000000 [ 3387.300570][T21323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3387.308570][T21323] R13: 00007ffd5d45cfcf R14: 00007fb99effe300 R15: 0000000000022000 [ 3387.316603][T21323] [ 3387.322565][T21325] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz-executor.4,pid=21325,uid=0 [ 3387.355424][T21323] Mem-Info: [ 3387.359913][T21325] Memory cgroup out of memory: Killed process 21325 (syz-executor.4) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:76kB oom_score_adj:1000 [ 3387.377771][T21323] active_anon:77280 inactive_anon:1118 isolated_anon:0 [ 3387.377771][T21323] active_file:11 inactive_file:15621 isolated_file:0 [ 3387.377771][T21323] unevictable:768 dirty:34 writeback:0 [ 3387.377771][T21323] slab_reclaimable:30974 slab_unreclaimable:953926 [ 3387.377771][T21323] mapped:19747 shmem:2090 pagetables:721 [ 3387.377771][T21323] sec_pagetables:0 bounce:0 [ 3387.377771][T21323] kernel_misc_reclaimable:0 [ 3387.377771][T21323] free:464666 free_pcp:7778 free_cma:0 [ 3387.424348][T21324] syz-executor.1 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3387.437982][T21324] CPU: 1 PID: 21324 Comm: syz-executor.1 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3387.448578][T21324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3387.458962][T21324] Call Trace: [ 3387.462333][T21324] [ 3387.465318][T21324] dump_stack_lvl+0x136/0x150 [ 3387.470072][T21324] dump_header+0x10a/0xd70 [ 3387.474561][T21324] oom_kill_process+0x25d/0x600 [ 3387.479514][T21324] out_of_memory+0x35c/0x1660 [ 3387.484309][T21324] ? oom_killer_disable+0x2b0/0x2b0 [ 3387.489758][T21324] ? rcu_read_unlock+0x9/0x60 [ 3387.494547][T21324] ? find_held_lock+0x2d/0x110 [ 3387.499443][T21324] mem_cgroup_out_of_memory+0x206/0x270 [ 3387.505089][T21324] ? mem_cgroup_margin+0x130/0x130 [ 3387.510280][T21324] ? lock_downgrade+0x690/0x690 [ 3387.515228][T21324] try_charge_memcg+0xf9b/0x13b0 [ 3387.520239][T21324] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3387.526294][T21324] ? rcu_read_unlock+0x9/0x60 [ 3387.531830][T21324] ? lock_downgrade+0x690/0x690 [ 3387.536853][T21324] charge_memcg+0x90/0x3b0 [ 3387.541330][T21324] __mem_cgroup_charge+0x2b/0x90 [ 3387.546352][T21324] __handle_mm_fault+0x1895/0x3e60 [ 3387.551546][T21324] ? vm_iomap_memory+0x190/0x190 [ 3387.556625][T21324] handle_mm_fault+0x2ba/0x9c0 [ 3387.561460][T21324] do_user_addr_fault+0x475/0x1230 [ 3387.566745][T21324] ? rcu_is_watching+0x12/0xb0 [ 3387.571683][T21324] exc_page_fault+0x98/0x170 [ 3387.576438][T21324] asm_exc_page_fault+0x26/0x30 [ 3387.581364][T21324] RIP: 0033:0x7faa0ba2bde9 [ 3387.585930][T21324] Code: 48 8b 04 24 48 85 c0 74 17 48 8b 54 24 18 48 0f ca 48 89 54 24 18 48 83 f8 01 0f 85 9b 02 00 00 48 8b 44 24 10 48 8b 54 24 18 <48> 89 10 e9 c2 fd ff ff 48 8b 44 24 10 0f b7 10 48 8b 04 24 48 85 [ 3387.605642][T21324] RSP: 002b:00007ffd537ccb30 EFLAGS: 00010246 [ 3387.611788][T21324] RAX: 0000000020005840 RBX: 0000000000000000 RCX: 0000000000000000 [ 3387.619818][T21324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555556e852e8 [ 3387.628289][T21324] RBP: 00007ffd537ccc28 R08: 0000000000000000 R09: 0000000000000000 [ 3387.636326][T21324] R10: 00007faa0b600e18 R11: 0000000000000246 R12: 000000000033a181 [ 3387.644366][T21324] R13: 00007ffd537ccc50 R14: 00007faa0bbabf80 R15: 0000000000000032 [ 3387.653109][T21324] [ 3387.669714][T21323] Node 0 active_anon:309072kB inactive_anon:4180kB active_file:16kB inactive_file:57552kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:79188kB dirty:68kB writeback:0kB shmem:6520kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 4096kB writeback_tmp:0kB kernel_stack:9780kB pagetables:2984kB sec_pagetables:0kB all_unreclaimable? no [ 3387.739366][T21324] memory: usage 307200kB, limit 307200kB, failcnt 96796 [ 3387.744955][T21323] Node 1 active_anon:348kB inactive_anon:328kB active_file:28kB inactive_file:4932kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:68kB writeback:0kB shmem:1840kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:432kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 3387.746882][T21324] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3387.797443][T21324] Memory cgroup stats for /syz1: [ 3387.797705][T21324] anon 131072 [ 3387.797705][T21324] file 352256 [ 3387.797705][T21324] kernel 314089472 [ 3387.797705][T21324] kernel_stack 65536 [ 3387.797705][T21324] pagetables 81920 [ 3387.797705][T21324] sec_pagetables 0 [ 3387.797705][T21324] percpu 5423968 [ 3387.797705][T21324] sock 0 [ 3387.797705][T21324] vmalloc 24576 [ 3387.797705][T21324] shmem 339968 [ 3387.797705][T21324] zswap 0 [ 3387.797705][T21324] zswapped 0 [ 3387.797705][T21324] file_mapped 262144 [ 3387.797705][T21324] file_dirty 12288 [ 3387.797705][T21324] file_writeback 0 [ 3387.797705][T21324] swapcached 0 [ 3387.797705][T21324] anon_thp 0 [ 3387.797705][T21324] file_thp 0 [ 3387.797705][T21324] shmem_thp 0 [ 3387.797705][T21324] inactive_anon 4096 [ 3387.797705][T21324] active_anon 466944 [ 3387.797705][T21324] inactive_file 12288 [ 3387.797705][T21324] active_file 0 [ 3387.797705][T21324] unevictable 0 [ 3387.797705][T21324] slab_reclaimable 249224 [ 3387.797705][T21324] slab_unreclaimable 308219552 [ 3387.797705][T21324] slab 308468776 [ 3387.797705][T21324] workingset_refault_anon 0 [ 3387.797705][T21324] workingset_refault_file 4 [ 3387.797705][T21324] workingset_activate_anon 0 [ 3387.797705][T21324] workingset_activate_file 0 [ 3387.797705][T21324] workingset_restore_anon 0 [ 3387.797705][T21324] workingset_restore_file 2 [ 3387.797705][T21324] workingset_nodereclaim 0 [ 3387.797705][T21324] pgscan 80277 [ 3387.797705][T21324] pgsteal 607 [ 3387.797705][T21324] pgscan_kswapd 0 [ 3387.797705][T21324] pgscan_direct 80277 [ 3387.797705][T21324] pgscan_khugepaged 0 [ 3387.797705][T21324] pgsteal_kswapd 0 [ 3387.797705][T21324] pgsteal_direct 607 [ 3387.797705][T21324] pgsteal_khugepaged 0 [ 3387.797705][T21324] pgfault 410683 [ 3387.797705][T21324] pgmajfault 0 [ 3387.797705][T21324] pgrefill 221188 [ 3387.797705][T21324] pgactivate 79577 [ 3387.797705][T21324] pgdeactivate 0 [ 3387.797705][T21324] pglazyfree 0 [ 3387.797705][T21324] pglazyfreed 0 [ 3387.797705][T21324] zswpin 0 [ 3387.797705][T21324] zswpout 0 [ 3387.806455][T21323] Node 0 DMA free:10720kB boost:0kB min:200kB low:248kB high:296kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:212kB local_pcp:116kB free_cma:0kB [ 3388.021443][T21324] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz-executor.1,pid=21324,uid=0 [ 3388.043579][T21323] lowmem_reserve[]: 0 2617 2619 2619 2619 [ 3388.050100][T21323] Node 0 DMA32 free:71328kB boost:0kB min:35440kB low:44300kB high:53160kB reserved_highatomic:0KB active_anon:308900kB inactive_anon:4136kB active_file:16kB inactive_file:55976kB unevictable:1536kB writepending:64kB present:3129332kB managed:2685124kB mlocked:0kB bounce:0kB free_pcp:24864kB local_pcp:20668kB free_cma:0kB [ 3388.083325][T21324] Memory cgroup out of memory: Killed process 21324 (syz-executor.1) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:84kB oom_score_adj:1000 [ 3388.139859][T21323] lowmem_reserve[]: 0 0 1 1 1 [ 3388.144703][T21323] Node 0 Normal free:20kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:40kB inactive_anon:4kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:4kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 3388.186769][ T8247] Bluetooth: hci4: command 0x0409 tx timeout [ 3388.198403][T21333] syz-executor.2 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3388.216394][T21323] lowmem_reserve[]: 0 0 0 0 0 [ 3388.223607][T21323] Node 1 Normal free:1775520kB boost:0kB min:54444kB low:68052kB high:81660kB reserved_highatomic:0KB active_anon:348kB inactive_anon:324kB active_file:28kB inactive_file:4932kB unevictable:1536kB writepending:68kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:5704kB local_pcp:5704kB free_cma:0kB [ 3388.254365][T21323] lowmem_reserve[]: 0 0 0 0 0 [ 3388.259366][T21323] Node 0 DMA: 2*4kB (UM) 3*8kB (UM) 2*16kB (UM) 7*32kB (UM) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10720kB [ 3388.269927][T21333] CPU: 0 PID: 21333 Comm: syz-executor.2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3388.286400][T21333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3388.296517][T21333] Call Trace: [ 3388.299839][T21333] [ 3388.302866][T21333] dump_stack_lvl+0x136/0x150 [ 3388.306599][T21323] Node 0 [ 3388.307583][T21333] dump_header+0x10a/0xd70 [ 3388.307608][T21323] DMA32: [ 3388.307638][T21333] oom_kill_process+0x25d/0x600 [ 3388.310568][T21323] 1174*4kB [ 3388.314984][T21333] out_of_memory+0x35c/0x1660 [ 3388.326622][T21323] (UME) [ 3388.330676][T21333] ? find_held_lock+0x2d/0x110 [ 3388.338438][T21333] ? oom_killer_disable+0x2b0/0x2b0 [ 3388.343708][T21333] ? rcu_read_unlock+0x9/0x60 [ 3388.346666][T21323] 506*8kB [ 3388.348498][T21333] ? find_held_lock+0x2d/0x110 [ 3388.351621][T21323] (ME) [ 3388.356329][T21333] mem_cgroup_out_of_memory+0x206/0x270 [ 3388.356385][T21333] ? mem_cgroup_margin+0x130/0x130 [ 3388.369884][T21333] ? lock_downgrade+0x690/0x690 [ 3388.374844][T21333] try_charge_memcg+0xf9b/0x13b0 [ 3388.375395][T21323] 222*16kB [ 3388.379823][T21333] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3388.379867][T21333] ? rcu_read_unlock+0x9/0x60 [ 3388.379908][T21333] ? lock_downgrade+0x690/0x690 [ 3388.394834][T21323] (UME) [ 3388.398574][T21333] charge_memcg+0x90/0x3b0 [ 3388.398617][T21333] __mem_cgroup_charge+0x2b/0x90 [ 3388.398654][T21333] do_wp_page+0x8eb/0x3520 [ 3388.402474][T21323] 138*32kB [ 3388.405946][T21333] ? lock_release+0x670/0x670 [ 3388.411539][T21323] (ME) [ 3388.415318][T21333] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3388.415365][T21333] ? do_raw_spin_lock+0x124/0x2b0 [ 3388.419477][T21323] 52*64kB [ 3388.423149][T21333] ? spin_bug+0x1c0/0x1c0 [ 3388.423191][T21333] ? lock_downgrade+0x690/0x690 [ 3388.426011][T21323] (ME) [ 3388.431346][T21333] __handle_mm_fault+0x19a1/0x3e60 [ 3388.431400][T21333] ? vm_iomap_memory+0x190/0x190 [ 3388.437713][T21323] 29*128kB [ 3388.439518][T21333] handle_mm_fault+0x2ba/0x9c0 [ 3388.443900][T21323] (UME) [ 3388.448700][T21333] do_user_addr_fault+0x475/0x1230 [ 3388.448751][T21333] ? rcu_is_watching+0x12/0xb0 [ 3388.482549][T21333] exc_page_fault+0x98/0x170 [ 3388.487275][T21333] asm_exc_page_fault+0x26/0x30 [ 3388.492182][T21333] RIP: 0033:0x7f9ac6239610 [ 3388.496646][T21333] Code: fe ff 49 39 dc 75 eb 48 8b 44 24 18 89 28 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 44 00 00 41 89 c5 e9 75 fe ff ff <43> 89 2c 84 e9 a3 fe ff ff 0f 1f 80 00 00 00 00 49 39 d4 74 70 48 [ 3388.516502][T21333] RSP: 002b:00007ffc61d0e920 EFLAGS: 00010246 [ 3388.522607][T21333] RAX: 00000000388b9d9b RBX: 00007f9ac63ac018 RCX: 0000001b2d120000 [ 3388.530609][T21333] RDX: 0000000000000000 RSI: 0000001b2d120018 RDI: 000000000c7c2369 [ 3388.538879][T21333] RBP: 00000000388b9d9b R08: 0000000000001d9b R09: 00000000388b9d9f [ 3388.546905][T21333] R10: 00007ffc61d0eae0 R11: 0000000000000246 R12: 00007f9ac63a0000 [ 3388.554927][T21333] R13: 0000000000000001 R14: 0000000000000005 R15: ffffffff87f9a562 [ 3388.563012][T21333] ? __sock_create+0x62/0x850 [ 3388.567754][T21333] [ 3388.588406][T21323] 28*256kB (UME) 22*512kB (UM) 14*1024kB (UM) 7*2048kB (M) 0*4096kB = 70856kB [ 3388.599419][T21323] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 3388.612300][T21323] Node 1 Normal: 2072*4kB (UM) 512*8kB (UME) 288*16kB (UME) 632*32kB (UME) 142*64kB (UME) 99*128kB (UE) 28*256kB (UME) 7*512kB (UME) 2*1024kB (UE) 0*2048kB 416*4096kB (M) = 1775712kB [ 3388.631445][T21323] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3388.642294][T21323] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3388.652119][T21323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 3388.662398][T21323] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 3388.673126][T21323] 17727 total pagecache pages [ 3388.679524][T21323] 0 pages in swap cache [ 3388.684957][T21323] Free swap = 0kB [ 3388.689269][T21323] Total swap = 0kB [ 3388.693154][T21323] 2097051 pages RAM [ 3388.698709][T21323] 0 pages HighMem/MovableOnly [ 3388.703566][T21323] 392115 pages reserved [ 3388.708206][T21323] 0 pages cma reserved [ 3388.732958][T21333] memory: usage 307200kB, limit 307200kB, failcnt 73175 [ 3388.740257][T21333] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3388.748186][T21333] Memory cgroup stats for /syz2: [ 3388.748460][T21333] anon 110592 [ 3388.748460][T21333] file 364544 [ 3388.748460][T21333] kernel 314097664 [ 3388.748460][T21333] kernel_stack 65536 [ 3388.748460][T21333] pagetables 69632 [ 3388.748460][T21333] sec_pagetables 0 [ 3388.748460][T21333] percpu 5428704 [ 3388.748460][T21333] sock 0 [ 3388.748460][T21333] vmalloc 0 [ 3388.748460][T21333] shmem 348160 [ 3388.748460][T21333] zswap 0 [ 3388.748460][T21333] zswapped 0 [ 3388.748460][T21333] file_mapped 311296 [ 3388.748460][T21333] file_dirty 16384 [ 3388.748460][T21333] file_writeback 0 [ 3388.748460][T21333] swapcached 0 [ 3388.748460][T21333] anon_thp 0 [ 3388.748460][T21333] file_thp 0 [ 3388.748460][T21333] shmem_thp 0 [ 3388.748460][T21333] inactive_anon 401408 [ 3388.748460][T21333] active_anon 57344 [ 3388.748460][T21333] inactive_file 12288 [ 3388.748460][T21333] active_file 4096 [ 3388.748460][T21333] unevictable 0 [ 3388.748460][T21333] slab_reclaimable 218152 [ 3388.748460][T21333] slab_unreclaimable 308286168 [ 3388.748460][T21333] slab 308504320 [ 3388.748460][T21333] workingset_refault_anon 0 [ 3388.748460][T21333] workingset_refault_file 0 [ 3388.748460][T21333] workingset_activate_anon 0 [ 3388.748460][T21333] workingset_activate_file 0 [ 3388.748460][T21333] workingset_restore_anon 0 [ 3388.748460][T21333] workingset_restore_file 0 [ 3388.748460][T21333] workingset_nodereclaim 0 [ 3388.748460][T21333] pgscan 56219 [ 3388.748460][T21333] pgsteal 471 [ 3388.748460][T21333] pgscan_kswapd 0 [ 3388.748460][T21333] pgscan_direct 56219 [ 3388.748460][T21333] pgscan_khugepaged 0 [ 3388.748460][T21333] pgsteal_kswapd 0 [ 3388.748460][T21333] pgsteal_direct 471 [ 3388.748460][T21333] pgsteal_khugepaged 0 [ 3388.748460][T21333] pgfault 422450 [ 3388.748460][T21333] pgmajfault 1 [ 3388.748460][T21333] pgrefill 188503 [ 3388.748460][T21333] pgactivate 55709 [ 3388.748460][T21333] pgdeactivate 0 [ 3388.748460][T21333] pglazyfree 0 [ 3388.748460][T21333] pglazyfreed 0 [ 3388.748460][T21333] zswpin 0 [ 3388.748460][T21333] zswpout 0 [ 3388.939963][T21333] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz-executor.2,pid=21333,uid=0 [ 3388.967833][T21333] Memory cgroup out of memory: Killed process 21333 (syz-executor.2) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:72kB oom_score_adj:1000 [ 3389.004881][T21338] syz-executor.5 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 3389.016053][T21338] CPU: 0 PID: 21338 Comm: syz-executor.5 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3389.026551][T21338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3389.036661][T21338] Call Trace: [ 3389.039990][T21338] [ 3389.042978][T21338] dump_stack_lvl+0x136/0x150 [ 3389.047750][T21338] dump_header+0x10a/0xd70 [ 3389.052235][T21338] oom_kill_process+0x25d/0x600 [ 3389.057124][T21338] out_of_memory+0x35c/0x1660 [ 3389.061956][T21338] ? find_held_lock+0x2d/0x110 [ 3389.066814][T21338] ? oom_killer_disable+0x2b0/0x2b0 [ 3389.072096][T21338] ? rcu_read_unlock+0x9/0x60 [ 3389.076838][T21338] ? find_held_lock+0x2d/0x110 [ 3389.081676][T21338] mem_cgroup_out_of_memory+0x206/0x270 [ 3389.087279][T21338] ? mem_cgroup_margin+0x130/0x130 [ 3389.092438][T21338] ? lock_downgrade+0x690/0x690 [ 3389.097387][T21338] try_charge_memcg+0xf9b/0x13b0 [ 3389.102392][T21338] ? mem_cgroup_handle_over_high+0x520/0x520 [ 3389.108418][T21338] ? rcu_read_unlock+0x9/0x60 [ 3389.113175][T21338] ? lock_downgrade+0x690/0x690 [ 3389.118082][T21338] charge_memcg+0x90/0x3b0 [ 3389.122640][T21338] __mem_cgroup_charge+0x2b/0x90 [ 3389.127610][T21338] ? copy_mc_to_kernel+0x3e/0x90 [ 3389.132625][T21338] do_wp_page+0x8eb/0x3520 [ 3389.137088][T21338] ? lock_release+0x670/0x670 [ 3389.141882][T21338] ? finish_mkwrite_fault+0x3d0/0x3d0 [ 3389.147379][T21338] ? do_raw_spin_lock+0x124/0x2b0 [ 3389.152447][T21338] ? spin_bug+0x1c0/0x1c0 [ 3389.156801][T21338] ? lock_downgrade+0x690/0x690 [ 3389.161705][T21338] __handle_mm_fault+0x19a1/0x3e60 [ 3389.166862][T21338] ? vm_iomap_memory+0x190/0x190 [ 3389.171872][T21338] handle_mm_fault+0x2ba/0x9c0 [ 3389.176681][T21338] do_user_addr_fault+0x475/0x1230 [ 3389.181835][T21338] ? rcu_is_watching+0x12/0xb0 [ 3389.186643][T21338] exc_page_fault+0x98/0x170 [ 3389.191355][T21338] asm_exc_page_fault+0x26/0x30 [ 3389.196252][T21338] RIP: 0033:0x7f0e44a366e5 [ 3389.200693][T21338] Code: 0f 1f 44 00 00 48 8b 57 18 48 83 fa ff 74 22 48 81 fa e7 03 00 00 0f 87 ee 00 00 00 48 c1 e2 04 48 8d 0d de 19 17 00 48 01 ca 02 01 48 89 42 08 48 8b 0d 8d 72 17 00 48 8b 53 10 4c 8d 81 00 [ 3389.220337][T21338] RSP: 002b:00007ffc44a97920 EFLAGS: 00010206 [ 3389.226431][T21338] RAX: 0000000000000003 RBX: 00007f0e44babf80 RCX: 00007f0e44ba80c0 [ 3389.234447][T21338] RDX: 00007f0e44ba80c0 RSI: ffff80f1bb454074 RDI: 00007f0e44babf80 [ 3389.242458][T21338] RBP: 00007f0e44babf80 R08: 0000000000000000 R09: 0000000000000000 [ 3389.250453][T21338] R10: 00007f0e446005f0 R11: 0000000000000000 R12: 00007f0e44babf8c [ 3389.258450][T21338] R13: 00007f0e44600628 R14: 00007f0e44babf80 R15: 0000000000000000 [ 3389.266463][T21338] [ 3389.291697][T21338] memory: usage 307200kB, limit 307200kB, failcnt 76354 [ 3389.301808][T21338] swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 3389.313960][T21338] Memory cgroup stats for /syz5: [ 3389.314199][T21338] anon 98304 [ 3389.314199][T21338] file 352256 [ 3389.314199][T21338] kernel 314122240 [ 3389.314199][T21338] kernel_stack 65536 [ 3389.314199][T21338] pagetables 81920 [ 3389.314199][T21338] sec_pagetables 0 [ 3389.314199][T21338] percpu 5432688 [ 3389.314199][T21338] sock 0 [ 3389.314199][T21338] vmalloc 20480 [ 3389.314199][T21338] shmem 344064 [ 3389.314199][T21338] zswap 0 [ 3389.314199][T21338] zswapped 0 [ 3389.314199][T21338] file_mapped 327680 [ 3389.314199][T21338] file_dirty 8192 [ 3389.314199][T21338] file_writeback 0 [ 3389.314199][T21338] swapcached 0 [ 3389.314199][T21338] anon_thp 0 [ 3389.314199][T21338] file_thp 0 [ 3389.314199][T21338] shmem_thp 0 [ 3389.314199][T21338] inactive_anon 368640 [ 3389.314199][T21338] active_anon 73728 [ 3389.314199][T21338] inactive_file 0 [ 3389.314199][T21338] active_file 8192 [ 3389.314199][T21338] unevictable 0 [ 3389.314199][T21338] slab_reclaimable 14400 [ 3389.314199][T21338] slab_unreclaimable 308476752 [ 3389.314199][T21338] slab 308491152 [ 3389.314199][T21338] workingset_refault_anon 0 [ 3389.314199][T21338] workingset_refault_file 1 [ 3389.314199][T21338] workingset_activate_anon 0 [ 3389.314199][T21338] workingset_activate_file 0 [ 3389.314199][T21338] workingset_restore_anon 0 [ 3389.314199][T21338] workingset_restore_file 0 [ 3389.314199][T21338] workingset_nodereclaim 0 [ 3389.314199][T21338] pgscan 44097 [ 3389.314199][T21338] pgsteal 463 [ 3389.314199][T21338] pgscan_kswapd 0 [ 3389.314199][T21338] pgscan_direct 44097 [ 3389.314199][T21338] pgscan_khugepaged 0 [ 3389.314199][T21338] pgsteal_kswapd 0 [ 3389.314199][T21338] pgsteal_direct 463 [ 3389.314199][T21338] pgsteal_khugepaged 0 [ 3389.314199][T21338] pgfault 412788 [ 3389.314199][T21338] pgmajfault 0 [ 3389.314199][T21338] pgrefill 144565 [ 3389.314199][T21338] pgactivate 43619 [ 3389.314199][T21338] pgdeactivate 0 [ 3389.314199][T21338] pglazyfree 0 [ 3389.314199][T21338] pglazyfreed 0 [ 3389.314199][T21338] zswpin 0 [ 3389.314199][T21338] zswpout 0 [ 3389.521267][T21338] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz5,mems_allowed=0-1,oom_memcg=/syz5,task_memcg=/syz5,task=syz-executor.5,pid=21338,uid=0 [ 3389.544272][T21338] Memory cgroup out of memory: Killed process 21338 (syz-executor.5) total-vm:54548kB, anon-rss:380kB, file-rss:8832kB, shmem-rss:0kB, UID:0 pgtables:88kB oom_score_adj:1000 [ 3390.177573][T21329] chnl_net:caif_netlink_parms(): no params data found [ 3390.266830][ T8247] Bluetooth: hci4: command 0x041b tx timeout [ 3390.558900][T21329] bridge0: port 1(bridge_slave_0) entered blocking state [ 3390.566064][T21329] bridge0: port 1(bridge_slave_0) entered disabled state [ 3390.576646][T21329] bridge_slave_0: entered allmulticast mode [ 3390.592838][T21329] bridge_slave_0: entered promiscuous mode [ 3390.613056][T21329] bridge0: port 2(bridge_slave_1) entered blocking state [ 3390.620843][T21329] bridge0: port 2(bridge_slave_1) entered disabled state [ 3390.632653][T21329] bridge_slave_1: entered allmulticast mode [ 3390.649600][T21329] bridge_slave_1: entered promiscuous mode [ 3390.838406][T21329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3390.894220][T21329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3392.347167][ T8247] Bluetooth: hci4: command 0x040f tx timeout [ 3394.269121][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 3394.275543][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 3394.426809][T21331] Bluetooth: hci4: command 0x0419 tx timeout [ 3395.564063][ T11] dummy0: left allmulticast mode [ 3395.569658][ T11] dummy0: left promiscuous mode [ 3395.575952][ T11] bridge7: port 1(dummy0) entered disabled state [ 3395.601519][ T11] hsr_slave_0: left promiscuous mode [ 3395.607953][ T11] hsr_slave_1: left promiscuous mode [ 3395.614153][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3395.628523][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3395.647212][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3395.657798][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3395.680071][ T11] bridge_slave_1: left allmulticast mode [ 3395.686071][ T11] bridge_slave_1: left promiscuous mode [ 3395.692060][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 3395.703422][ T11] bridge_slave_0: left allmulticast mode [ 3395.709477][ T11] bridge_slave_0: left promiscuous mode [ 3395.715207][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 3395.865401][ T11] veth1_macvtap: left promiscuous mode [ 3395.875628][ T11] veth0_macvtap: left promiscuous mode [ 3395.896921][ T11] veth1_vlan: left promiscuous mode [ 3395.902664][ T11] veth0_vlan: left promiscuous mode [ 3451.069945][ T8247] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3451.079562][ T8247] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3451.089374][ T8247] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3451.097578][ T8247] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3451.105061][ T8247] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3453.157166][T21331] Bluetooth: hci6: command 0x0409 tx timeout [ 3455.227295][T21331] Bluetooth: hci6: command 0x041b tx timeout [ 3455.709172][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 3455.715561][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 3457.307441][T21331] Bluetooth: hci6: command 0x040f tx timeout [ 3459.397723][T21331] Bluetooth: hci6: command 0x0419 tx timeout [ 3508.986701][ T8247] Bluetooth: hci4: command 0x0406 tx timeout [ 3517.148955][ T1212] ieee802154 phy0 wpan0: encryption failed: -22 [ 3517.155817][ T1212] ieee802154 phy1 wpan1: encryption failed: -22 [ 3517.411104][ T8247] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3517.421719][ T8247] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3517.435162][ T8247] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3517.443766][ T8247] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3517.452374][ T8247] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3519.548171][T21331] Bluetooth: hci7: command 0x0409 tx timeout [ 3521.627275][T21331] Bluetooth: hci7: command 0x041b tx timeout [ 3523.707018][T21331] Bluetooth: hci7: command 0x040f tx timeout [ 3525.786757][T21331] Bluetooth: hci7: command 0x0419 tx timeout [ 3552.346727][ T28] INFO: task dhcpcd:4655 blocked for more than 143 seconds. [ 3552.354106][ T28] Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3552.362002][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3552.370989][ T28] task:dhcpcd state:D stack:22896 pid:4655 ppid:4654 flags:0x00000002 [ 3552.380484][ T28] Call Trace: [ 3552.383814][ T28] [ 3552.389115][ T28] __schedule+0xc91/0x5770 [ 3552.393628][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3552.399823][ T28] ? arch_stack_walk+0x97/0xf0 [ 3552.404674][ T28] ? io_schedule_timeout+0x150/0x150 [ 3552.410325][ T28] ? __mutex_lock+0xa36/0x1350 [ 3552.415171][ T28] schedule+0xde/0x1a0 [ 3552.421338][ T28] schedule_preempt_disabled+0x13/0x20 [ 3552.427476][ T28] __mutex_lock+0xa3b/0x1350 [ 3552.432245][ T28] ? netlink_dump+0xbe/0xc50 [ 3552.437133][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3552.442759][ T28] ? lock_downgrade+0x690/0x690 [ 3552.448158][ T28] ? _raw_spin_unlock_irqrestore+0x54/0x70 [ 3552.454045][ T28] netlink_dump+0xbe/0xc50 [ 3552.459161][ T28] ? netlink_deliver_tap+0xcf0/0xcf0 [ 3552.464511][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3552.470245][ T28] ? kfree_skbmem+0xef/0x1b0 [ 3552.474891][ T28] netlink_recvmsg+0xc09/0xe60 [ 3552.480264][ T28] ? netlink_dump+0xc50/0xc50 [ 3552.485113][ T28] ? aa_sk_perm+0x31d/0xb10 [ 3552.490098][ T28] ? aa_af_perm+0x240/0x240 [ 3552.494656][ T28] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 3552.502708][ T28] ? security_socket_recvmsg+0x93/0xc0 [ 3552.508734][ T28] ? netlink_dump+0xc50/0xc50 [ 3552.513483][ T28] sock_recvmsg+0xe2/0x160 [ 3552.518498][ T28] ____sys_recvmsg+0x210/0x5a0 [ 3552.524516][ T28] ? kernel_recvmsg+0x80/0x80 [ 3552.529448][ T28] ? copy_msghdr_from_user+0xfc/0x150 [ 3552.534897][ T28] ? __copy_msghdr+0x4b0/0x4b0 [ 3552.539874][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3552.544881][ T28] ___sys_recvmsg+0xf2/0x180 [ 3552.549826][ T28] ? copy_msghdr_from_user+0x150/0x150 [ 3552.555399][ T28] ? lock_downgrade+0x690/0x690 [ 3552.560465][ T28] ? __fget_light+0x20a/0x270 [ 3552.565248][ T28] __sys_recvmsg+0xf4/0x1c0 [ 3552.570320][ T28] ? __sys_recvmsg_sock+0x50/0x50 [ 3552.575440][ T28] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3552.582464][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 3552.589011][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3552.594326][ T28] do_syscall_64+0x39/0xb0 [ 3552.599259][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3552.605225][ T28] RIP: 0033:0x7fbb5d9e291e [ 3552.610276][ T28] RSP: 002b:00007ffddebd3438 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 3552.620680][ T28] RAX: ffffffffffffffda RBX: 00007ffddebd4560 RCX: 00007fbb5d9e291e [ 3552.629773][ T28] RDX: 0000000000000000 RSI: 00007ffddebd4480 RDI: 000000000000000f [ 3552.638014][ T28] RBP: 00007ffddebd44f0 R08: 0000000000000000 R09: 0000000000000000 [ 3552.646129][ T28] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000eec [ 3552.654271][ T28] R13: 00007ffddebd4464 R14: 00007ffddebd4480 R15: 00007ffddebd4470 [ 3552.662440][ T28] [ 3552.665652][ T28] INFO: task kworker/1:2:10447 blocked for more than 143 seconds. [ 3552.673986][ T28] Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3552.681912][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3552.690767][ T28] task:kworker/1:2 state:D stack:27056 pid:10447 ppid:2 flags:0x00004000 [ 3552.700286][ T28] Workqueue: events switchdev_deferred_process_work [ 3552.707258][ T28] Call Trace: [ 3552.710588][ T28] [ 3552.713637][ T28] __schedule+0xc91/0x5770 [ 3552.718205][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 3552.723494][ T28] ? io_schedule_timeout+0x150/0x150 [ 3552.732501][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 3552.737931][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3552.743213][ T28] schedule+0xde/0x1a0 [ 3552.747547][ T28] schedule_preempt_disabled+0x13/0x20 [ 3552.753071][ T28] __mutex_lock+0xa3b/0x1350 [ 3552.757827][ T28] ? switchdev_deferred_process_work+0xe/0x20 [ 3552.763975][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3552.769648][ T28] ? lock_downgrade+0x690/0x690 [ 3552.774550][ T28] ? __schedule+0xc99/0x5770 [ 3552.779288][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 3552.784558][ T28] switchdev_deferred_process_work+0xe/0x20 [ 3552.790576][ T28] process_one_work+0x991/0x15c0 [ 3552.795594][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3552.801157][ T28] ? spin_bug+0x1c0/0x1c0 [ 3552.805555][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 3552.810734][ T28] worker_thread+0x669/0x1090 [ 3552.815487][ T28] ? __kthread_parkme+0x163/0x220 [ 3552.821022][ T28] ? process_one_work+0x15c0/0x15c0 [ 3552.826303][ T28] kthread+0x2e8/0x3a0 [ 3552.833277][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3552.840963][ T28] ret_from_fork+0x1f/0x30 [ 3552.845503][ T28] [ 3552.848712][ T28] INFO: task kworker/1:0:21294 blocked for more than 143 seconds. [ 3552.856700][ T28] Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3552.864273][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3552.873157][ T28] task:kworker/1:0 state:D stack:28296 pid:21294 ppid:2 flags:0x00004000 [ 3552.882633][ T28] Workqueue: events linkwatch_event [ 3552.888120][ T28] Call Trace: [ 3552.891433][ T28] [ 3552.894384][ T28] __schedule+0xc91/0x5770 [ 3552.898986][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3552.905038][ T28] ? wq_worker_sleeping+0x1e9/0x250 [ 3552.910561][ T28] ? io_schedule_timeout+0x150/0x150 [ 3552.915964][ T28] ? _raw_spin_unlock_irq+0x23/0x50 [ 3552.921355][ T28] ? lockdep_hardirqs_on+0x7d/0x100 [ 3552.926717][ T28] schedule+0xde/0x1a0 [ 3552.932003][ T28] schedule_preempt_disabled+0x13/0x20 [ 3552.938588][ T28] __mutex_lock+0xa3b/0x1350 [ 3552.943263][ T28] ? linkwatch_event+0xf/0x70 [ 3552.950313][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3552.955936][ T28] ? lock_release+0x670/0x670 [ 3552.960750][ T28] linkwatch_event+0xf/0x70 [ 3552.965314][ T28] process_one_work+0x991/0x15c0 [ 3552.970470][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3552.975914][ T28] ? spin_bug+0x1c0/0x1c0 [ 3552.980382][ T28] ? _raw_spin_lock_irq+0x45/0x50 [ 3552.985593][ T28] worker_thread+0x669/0x1090 [ 3552.991293][ T28] ? __kthread_parkme+0x163/0x220 [ 3552.996408][ T28] ? process_one_work+0x15c0/0x15c0 [ 3553.001830][ T28] kthread+0x2e8/0x3a0 [ 3553.005951][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3553.011830][ T28] ret_from_fork+0x1f/0x30 [ 3553.016346][ T28] [ 3553.019503][ T28] INFO: task syz-executor.3:21329 blocked for more than 144 seconds. [ 3553.027802][ T28] Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3553.036368][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 3553.045268][ T28] task:syz-executor.3 state:D stack:25072 pid:21329 ppid:1 flags:0x00000004 [ 3553.054655][ T28] Call Trace: [ 3553.060035][ T28] [ 3553.063059][ T28] __schedule+0xc91/0x5770 [ 3553.067691][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3553.073776][ T28] ? io_schedule_timeout+0x150/0x150 [ 3553.079452][ T28] ? __mutex_lock+0xa36/0x1350 [ 3553.084320][ T28] schedule+0xde/0x1a0 [ 3553.088586][ T28] schedule_preempt_disabled+0x13/0x20 [ 3553.094106][ T28] __mutex_lock+0xa3b/0x1350 [ 3553.098898][ T28] ? rtnetlink_rcv_msg+0x3e8/0xd50 [ 3553.104087][ T28] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 3553.110062][ T28] ? rtnetlink_rcv_msg+0x3b2/0xd50 [ 3553.115269][ T28] rtnetlink_rcv_msg+0x3e8/0xd50 [ 3553.120392][ T28] ? rtnl_stats_set+0x4d0/0x4d0 [ 3553.125314][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3553.131507][ T28] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3553.138908][ T28] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3553.145105][ T28] ? ___slab_alloc+0x9df/0x1400 [ 3553.150321][ T28] ? lock_downgrade+0x690/0x690 [ 3553.155265][ T28] netlink_rcv_skb+0x165/0x440 [ 3553.160257][ T28] ? rtnl_stats_set+0x4d0/0x4d0 [ 3553.165205][ T28] ? netlink_ack+0x1360/0x1360 [ 3553.172325][ T28] ? lock_release+0x670/0x670 [ 3553.177197][ T28] ? netlink_deliver_tap+0x1b1/0xcf0 [ 3553.182549][ T28] netlink_unicast+0x547/0x7f0 [ 3553.187678][ T28] ? netlink_attachskb+0x890/0x890 [ 3553.192851][ T28] ? __virt_addr_valid+0x61/0x2e0 [ 3553.198226][ T28] ? __phys_addr_symbol+0x30/0x70 [ 3553.203315][ T28] ? __check_object_size+0x333/0x6e0 [ 3553.208982][ T28] netlink_sendmsg+0x925/0xe30 [ 3553.213832][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3553.219013][ T28] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 3553.224460][ T28] ? netlink_unicast+0x7f0/0x7f0 [ 3553.229579][ T28] sock_sendmsg+0xde/0x190 [ 3553.234070][ T28] __sys_sendto+0x23a/0x340 [ 3553.239859][ T28] ? __ia32_sys_getpeername+0xb0/0xb0 [ 3553.245320][ T28] ? percpu_counter_add_batch+0x199/0x1e0 [ 3553.251238][ T28] ? xfd_validate_state+0x5d/0x180 [ 3553.256424][ T28] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 3553.262475][ T28] ? kernel_fpu_begin_mask+0x270/0x270 [ 3553.268128][ T28] ? unlock_page_memcg+0x2d0/0x2d0 [ 3553.273361][ T28] __x64_sys_sendto+0xe1/0x1b0 [ 3553.280563][ T28] ? syscall_enter_from_user_mode+0x26/0x80 [ 3553.286632][ T28] do_syscall_64+0x39/0xb0 [ 3553.291112][ T28] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 3553.297117][ T28] RIP: 0033:0x7f4207e3e19c [ 3553.301577][ T28] RSP: 002b:00007ffdd19c0300 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 3553.310739][ T28] RAX: ffffffffffffffda RBX: 00007f4208ad4620 RCX: 00007f4207e3e19c [ 3553.318933][ T28] RDX: 0000000000000068 RSI: 00007f4208ad4670 RDI: 0000000000000003 [ 3553.327150][ T28] RBP: 0000000000000000 R08: 00007ffdd19c0354 R09: 000000000000000c [ 3553.335162][ T28] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 3553.344344][ T28] R13: 00007f4208ad4670 R14: 0000000000000003 R15: 0000000000000000 [ 3553.352512][ T28] [ 3553.355603][ T28] [ 3553.355603][ T28] Showing all locks held in the system: [ 3553.363482][ T28] 5 locks held by kworker/u4:1/11: [ 3553.368732][ T28] 1 lock held by rcu_tasks_kthre/12: [ 3553.374053][ T28] #0: ffffffff8c794a70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 3553.384770][ T28] 1 lock held by rcu_tasks_trace/13: [ 3553.392358][ T28] #0: ffffffff8c794770 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x31/0xd80 [ 3553.403696][ T28] 1 lock held by khungtaskd/28: [ 3553.408748][ T28] #0: ffffffff8c7955c0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x340 [ 3553.418823][ T28] 3 locks held by kworker/u4:6/2843: [ 3553.424151][ T28] #0: ffff8880b983c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 [ 3553.434391][ T28] #1: ffff8880b9828808 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x216/0x950 [ 3553.446950][ T28] #2: ffff8880b983c298 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2f/0x120 [ 3553.457109][ T28] 1 lock held by dhcpcd/4655: [ 3553.461829][ T28] #0: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: netlink_dump+0xbe/0xc50 [ 3553.471120][ T28] 2 locks held by getty/4742: [ 3553.476063][ T28] #0: ffff88802753f098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x26/0x80 [ 3553.486096][ T28] #1: ffffc900015b02f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xef4/0x13e0 [ 3553.498891][ T28] 3 locks held by kworker/1:4/5074: [ 3553.504255][ T28] #0: ffff8880274f7938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 3553.515489][ T28] #1: ffffc9000444fda8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 3553.528827][ T28] #2: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 3553.538620][ T28] 3 locks held by kworker/1:2/10447: [ 3553.545098][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 3553.555786][ T28] #1: ffffc9000354fda8 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 3553.566328][ T28] #2: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 3553.576951][ T28] 3 locks held by kworker/1:0/21294: [ 3553.582269][ T28] #0: ffff888012470d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 3553.592852][ T28] #1: ffffc90015547da8 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 3553.603392][ T28] #2: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xf/0x70 [ 3553.614661][ T28] 1 lock held by syz-executor.3/21329: [ 3553.620450][ T28] #0: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 3553.630322][ T28] 3 locks held by kworker/0:4/21334: [ 3553.635756][ T28] #0: ffff8880274f7938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x87a/0x15c0 [ 3553.648056][ T28] #1: ffffc9000bf77da8 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x15c0 [ 3553.661353][ T28] #2: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 3553.671212][ T28] 1 lock held by syz-executor.3/21377: [ 3553.676748][ T28] #0: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 3553.686244][ T28] 1 lock held by syz-executor.3/21382: [ 3553.691893][ T28] #0: ffffffff8e0f63c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e8/0xd50 [ 3553.701589][ T28] [ 3553.703947][ T28] ============================================= [ 3553.703947][ T28] [ 3553.712567][ T28] NMI backtrace for cpu 1 [ 3553.716947][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3553.726807][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3553.736910][ T28] Call Trace: [ 3553.740238][ T28] [ 3553.743322][ T28] dump_stack_lvl+0xd9/0x150 [ 3553.747969][ T28] nmi_cpu_backtrace+0x29c/0x350 [ 3553.753482][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 3553.758742][ T28] nmi_trigger_cpumask_backtrace+0x2a4/0x300 [ 3553.764778][ T28] watchdog+0xe16/0x1090 [ 3553.769179][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3553.775209][ T28] kthread+0x2e8/0x3a0 [ 3553.779318][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3553.785020][ T28] ret_from_fork+0x1f/0x30 [ 3553.789533][ T28] [ 3553.794009][ T28] Sending NMI from CPU 1 to CPUs 0: [ 3553.799666][ C0] NMI backtrace for cpu 0 [ 3553.799679][ C0] CPU: 0 PID: 21375 Comm: kworker/u4:2 Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3553.799707][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3553.799723][ C0] Workqueue: phy5 ieee80211_iface_work [ 3553.799844][ C0] RIP: 0010:stack_trace_consume_entry+0xf/0x160 [ 3553.799875][ C0] Code: 48 89 df e8 53 05 63 00 e9 e5 fc ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 f3 0f 1e fa 48 b8 00 00 00 00 00 fc ff df 55 <53> 48 89 fb 48 83 c7 10 48 89 fa 48 83 ec 08 48 c1 ea 03 0f b6 04 [ 3553.799900][ C0] RSP: 0018:ffffc90003f4f310 EFLAGS: 00000282 [ 3553.799918][ C0] RAX: dffffc0000000000 RBX: ffffffff81710400 RCX: 0000000000000000 [ 3553.799935][ C0] RDX: 1ffff920007e9e6d RSI: ffffffff8988b5e6 RDI: ffffc90003f4f3d8 [ 3553.799952][ C0] RBP: ffffc90003f4f3a8 R08: ffffffff8f07f9ba R09: ffffc90003f4f354 [ 3553.799969][ C0] R10: 0000000000000001 R11: ffffc90003f4f6c8 R12: ffffc90003f4f3d8 [ 3553.799986][ C0] R13: 0000000000000000 R14: ffff888020848000 R15: 0000000000000024 [ 3553.800003][ C0] FS: 0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 3553.800028][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 3553.800045][ C0] CR2: 000000c006ffc4c0 CR3: 000000000c571000 CR4: 00000000003506f0 [ 3553.800062][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 3553.800078][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 3553.800094][ C0] Call Trace: [ 3553.800101][ C0] [ 3553.800109][ C0] arch_stack_walk+0x71/0xf0 [ 3553.800145][ C0] ? ieee802_11_parse_elems_full+0x106/0x1340 [ 3553.800213][ C0] ? ieee802_11_parse_elems_full+0x106/0x1340 [ 3553.800248][ C0] stack_trace_save+0x90/0xc0 [ 3553.800273][ C0] ? filter_irq_stacks+0x90/0x90 [ 3553.800300][ C0] ? print_usage_bug.part.0+0x660/0x660 [ 3553.800328][ C0] ? lock_release+0x670/0x670 [ 3553.800355][ C0] kasan_save_stack+0x22/0x40 [ 3553.800395][ C0] ? kasan_save_stack+0x22/0x40 [ 3553.800434][ C0] ? kasan_set_track+0x25/0x30 [ 3553.800472][ C0] ? __kasan_kmalloc+0xa2/0xb0 [ 3553.800510][ C0] ? __kmalloc+0x5e/0x190 [ 3553.800539][ C0] ? find_held_lock+0x2d/0x110 [ 3553.800581][ C0] ? cfg80211_bss_update+0x26a/0x21f0 [ 3553.800712][ C0] ? lock_downgrade+0x690/0x690 [ 3553.800748][ C0] ? exc_int3+0xf/0x80 [ 3553.800770][ C0] ? asm_exc_int3+0x39/0x40 [ 3553.800806][ C0] ? ieee802_11_parse_elems_full+0x106/0x1340 [ 3553.800842][ C0] ? __kmem_cache_alloc_node+0xc8/0x320 [ 3553.800885][ C0] ? __kmem_cache_alloc_node+0x1b0/0x320 [ 3553.800923][ C0] ? ieee802_11_parse_elems_full+0x106/0x1340 [ 3553.800958][ C0] kasan_set_track+0x25/0x30 [ 3553.800996][ C0] __kasan_kmalloc+0xa2/0xb0 [ 3553.801036][ C0] __kmalloc+0x5e/0x190 [ 3553.801064][ C0] ieee802_11_parse_elems_full+0x106/0x1340 [ 3553.801110][ C0] ? ieee80211_wake_vif_queues+0x40/0x40 [ 3553.801143][ C0] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 3553.801170][ C0] ? cfg80211_find_elem_match+0x197/0x1e0 [ 3553.801209][ C0] ? cfg80211_inform_bss_frame_data+0x16d/0xca0 [ 3553.801255][ C0] ieee802_11_parse_elems_crc.constprop.0+0x99/0xd0 [ 3553.801286][ C0] ? ieee80211_scan_accept_presp+0x280/0x280 [ 3553.801324][ C0] ieee80211_bss_info_update+0x410/0xb50 [ 3553.801356][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 3553.801382][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x197b/0x3030 [ 3553.801426][ C0] ? ieee80211_mandatory_rates+0x1b8/0x250 [ 3553.801456][ C0] ieee80211_ibss_rx_queued_mgmt+0x19c9/0x3030 [ 3553.801495][ C0] ? mark_lock.part.0+0xee/0x1970 [ 3553.801529][ C0] ? ieee80211_ibss_rx_no_sta+0x8e0/0x8e0 [ 3553.801566][ C0] ? find_held_lock+0x2d/0x110 [ 3553.801606][ C0] ? find_held_lock+0x2d/0x110 [ 3553.801648][ C0] ? kcov_remote_start+0x27b/0x7a0 [ 3553.801677][ C0] ? mark_held_locks+0x9f/0xe0 [ 3553.801704][ C0] ? kcov_remote_start+0x15a/0x7a0 [ 3553.801735][ C0] ? lockdep_hardirqs_on+0x7d/0x100 [ 3553.801765][ C0] ? _raw_spin_unlock_irqrestore+0x41/0x70 [ 3553.801805][ C0] ieee80211_iface_work+0xa4d/0xd70 [ 3553.801846][ C0] process_one_work+0x991/0x15c0 [ 3553.801884][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 3553.801919][ C0] ? spin_bug+0x1c0/0x1c0 [ 3553.801946][ C0] ? _raw_spin_lock_irq+0x45/0x50 [ 3553.801984][ C0] worker_thread+0x669/0x1090 [ 3553.802021][ C0] ? __kthread_parkme+0x163/0x220 [ 3553.802045][ C0] ? process_one_work+0x15c0/0x15c0 [ 3553.802078][ C0] kthread+0x2e8/0x3a0 [ 3553.802102][ C0] ? kthread_complete_and_exit+0x40/0x40 [ 3553.802132][ C0] ret_from_fork+0x1f/0x30 [ 3553.802177][ C0] [ 3553.817987][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 3553.818009][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.3.0-rc7-syzkaller-00173-gd913d32cc270 #0 [ 3553.818046][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023 [ 3553.818064][ T28] Call Trace: [ 3553.818074][ T28] [ 3553.818086][ T28] dump_stack_lvl+0xd9/0x150 [ 3553.818129][ T28] panic+0x688/0x730 [ 3553.818172][ T28] ? panic_smp_self_stop+0x90/0x90 [ 3553.818221][ T28] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 3553.818254][ T28] ? preempt_schedule_thunk+0x1a/0x20 [ 3553.818309][ T28] ? watchdog+0xbe8/0x1090 [ 3553.818349][ T28] watchdog+0xbf9/0x1090 [ 3553.818402][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80 [ 3553.818443][ T28] kthread+0x2e8/0x3a0 [ 3553.818475][ T28] ? kthread_complete_and_exit+0x40/0x40 [ 3553.818516][ T28] ret_from_fork+0x1f/0x30 [ 3553.818580][ T28] [ 3553.821458][ T28] Kernel Offset: disabled [ 3554.348589][ T28] Rebooting in 86400 seconds..